From 2b1b84d84386678bac6707a3f22c1c4658893476 Mon Sep 17 00:00:00 2001 From: frikky Date: Tue, 16 May 2023 04:07:33 +0200 Subject: [PATCH] App framework fixes and new ways to get usecases --- backend/go-app/walkoff.go | 4 +- frontend/src/components/AppFramework.jsx | 145 ++++++++-------------- frontend/src/components/Header.jsx | 5 +- frontend/src/components/OrgHeader.jsx | 51 +------- frontend/src/components/ParsedAction.jsx | 12 +- frontend/src/components/UsecaseSearch.jsx | 48 ++++++- frontend/src/views/Admin.jsx | 143 +++++++++++++++++++-- frontend/src/views/AngularWorkflow.jsx | 8 -- frontend/src/views/Search.jsx | 4 +- frontend/src/views/Welcome.jsx | 49 +++++--- frontend/src/views/Workflows.jsx | 20 +++ 11 files changed, 298 insertions(+), 191 deletions(-) diff --git a/backend/go-app/walkoff.go b/backend/go-app/walkoff.go index 91bc6dbd..fd615781 100644 --- a/backend/go-app/walkoff.go +++ b/backend/go-app/walkoff.go @@ -263,7 +263,7 @@ func handleGetWorkflowqueue(resp http.ResponseWriter, request *http.Request) { environment := request.Header.Get("org") if len(environment) == 0 { - log.Printf("[AUDIT] No 'org' header set (get workflow queue). Required for cloud.") + //log.Printf("[AUDIT] No 'org' header set (get workflow queue). ") /* resp.WriteHeader(403) resp.Write([]byte(fmt.Sprintf(`{"success": false, "reason": "Specify the org header. This can be done by setting the 'ORG' environment variable for Orborus to your Org ID in Shuffle"}`))) @@ -276,7 +276,7 @@ func handleGetWorkflowqueue(resp http.ResponseWriter, request *http.Request) { // This section is cloud custom for now auth := request.Header.Get("Authorization") if len(auth) == 0 { - log.Printf("[AUDIT] No Authorization header set. Required for cloud. Env: %s, org: %s", orgId, environment) + //log.Printf("[AUDIT] No Authorization header set. Env: %s, org: %s", orgId, environment) /* resp.WriteHeader(401) resp.Write([]byte(fmt.Sprintf(`{"success": false, "reason": "Specify the auth header (only applicable for cloud for now)."}`))) diff --git a/frontend/src/components/AppFramework.jsx b/frontend/src/components/AppFramework.jsx index 579fe4a6..0fd818d8 100644 --- a/frontend/src/components/AppFramework.jsx +++ b/frontend/src/components/AppFramework.jsx @@ -116,58 +116,7 @@ export const usecases = { "human": true, }, ]}, - "Ransomware": { - "manual": [], - "automated": [ - { - "source": "BOTTOM_LEFT", - "target": "EDR & AV", - "description": "EDR & AV alert", - "human": false, - }, - { - "source": "EDR & AV", - "target": "SHUFFLE", - "description": "", - "human": false, - }, - { - "source": "SHUFFLE", - "target": "EDR & AV", - "human": false, - "description": "isolate", - }, - { - "source": "SHUFFLE", - "target": "IAM", - "human": false, - "description": "Block access", - }, - { - "source": "SHUFFLE", - "target": "COMMS", - "description": "Notify oncall and affected user", - "human": false, - }, - { - "source": "SHUFFLE", - "target": "CASES", - "description": "Create enriched alert", - "human": false, - }, - { - "source": "SHUFFLE", - "target": "CASES", - "human": false, - }, - { - "source": "CASES", - "target": "EDR & AV", - "description": "Validate alert", - "human": true, - }, - ] - }, + "Exploits": { "manual": [], "automated": [ @@ -220,46 +169,6 @@ export const usecases = { }, ] }, - "AWS S3 honeypots": { - "manual": [], - "automated": [ - { - "source": "TOP_LEFT", - "target": "SIEM", - "description": "S3 logs", - "human": false, - }, - - { - "source": "SIEM", - "target": "SHUFFLE", - "human": false, - }, - { - "source": "SHUFFLE", - "target": "INTEL", - "description": "Add sighting", - "human": false, - }, - { - "source": "INTEL", - "target": "SHUFFLE", - "human": false, - }, - { - "source": "SHUFFLE", - "target": "CASES", - "description": "Create case", - "human": false, - }, - { - "source": "SHUFFLE", - "target": "NETWORK", - "description": "Block IP", - "human": false, - }, - ] - }, "SIEM alerts": { "manual": [], "automated": [ @@ -535,6 +444,58 @@ export const usecases = { }, ] }, + "Ransomware": { + "manual": [], + "automated": [ + { + "source": "BOTTOM_LEFT", + "target": "EDR & AV", + "description": "EDR & AV alert", + "human": false, + }, + { + "source": "EDR & AV", + "target": "SHUFFLE", + "description": "", + "human": false, + }, + { + "source": "SHUFFLE", + "target": "EDR & AV", + "human": false, + "description": "isolate", + }, + { + "source": "SHUFFLE", + "target": "IAM", + "human": false, + "description": "Block access", + }, + { + "source": "SHUFFLE", + "target": "COMMS", + "description": "Notify oncall and affected user", + "human": false, + }, + { + "source": "SHUFFLE", + "target": "CASES", + "description": "Create enriched alert", + "human": false, + }, + { + "source": "SHUFFLE", + "target": "CASES", + "human": false, + }, + { + "source": "CASES", + "target": "EDR & AV", + "description": "Validate alert", + "human": true, + }, + ] + }, "Draw": { } } diff --git a/frontend/src/components/Header.jsx b/frontend/src/components/Header.jsx index de58fed3..1dde3f2e 100644 --- a/frontend/src/components/Header.jsx +++ b/frontend/src/components/Header.jsx @@ -617,7 +617,7 @@ const { globalUrl, setNotifications, notifications, isLoggedIn, removeCookie, ho - - {/* -
{ + */} + +
{ if (window.drift !== undefined) { - window.drift.api.startInteraction({ interactionId: 341911 }) + window.drift.api.startInteraction({ interactionId: 340045 }) } else { console.log("Couldn't find drift in window.drift and not .drift-open-chat with querySelector: ", window.drift) } }}> - Want a free Proof of Value with our support team? + Want a demo instead?
- */}
} diff --git a/frontend/src/views/Workflows.jsx b/frontend/src/views/Workflows.jsx index 25942e65..f5f052f4 100644 --- a/frontend/src/views/Workflows.jsx +++ b/frontend/src/views/Workflows.jsx @@ -3447,6 +3447,26 @@ const Workflows = (props) => { ) : null} + {/*userdata.priorities !== undefined && userdata.priorities !== null && userdata.priorities.length > 0 ? +
+
+ + {userdata.priorities[0].name} + + + {userdata.priorities[0].description} + +
+
+ + +
+
+ : null*/}
{view === "grid" ? (