App framework fixes and new ways to get usecases

frontend/src/components/AppFramework.jsx

@@ -116,58 +116,7 @@ export const usecases = {
 				"human": true,
 			},
 	]},
-	"Ransomware": {
-		"manual": [],
-		"automated": [
-			{
-				"source":	"BOTTOM_LEFT",
-				"target":	"EDR & AV",
-				"description": "EDR & AV alert",
-				"human": false,
-			},
-			{
-				"source":	"EDR & AV",
-				"target":	"SHUFFLE",
-				"description": "",
-				"human": false,
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"EDR & AV",
-				"human": false,
-				"description": "isolate",
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"IAM",
-				"human": false,
-				"description": "Block access",
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"COMMS",
-				"description": "Notify oncall and affected user",
-				"human": false,
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"CASES",
-				"description": "Create enriched alert",
-				"human": false,
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"CASES",
-				"human": false,
-			},
-			{
-				"source":	"CASES",
-				"target":	"EDR & AV",
-				"description": "Validate alert",
-				"human": true,
-			},
-		]
-	},
+	
 	"Exploits": {
 		"manual": [],
 		"automated": [
@@ -220,46 +169,6 @@ export const usecases = {
 			},
 		]
 	},	
-	"AWS S3 honeypots": {
-		"manual": [],
-		"automated": [
-			{
-				"source":	"TOP_LEFT",
-				"target":	"SIEM",
-				"description": "S3 logs",
-				"human": false,
-			},
-
-			{
-				"source":	"SIEM",
-				"target":	"SHUFFLE",
-				"human": false,
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"INTEL",
-				"description": "Add sighting",
-				"human": false,
-			},
-			{
-				"source":	"INTEL",
-				"target":	"SHUFFLE",
-				"human": false,
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"CASES",
-				"description": "Create case",
-				"human": false,
-			},
-			{
-				"source":	"SHUFFLE",
-				"target":	"NETWORK",
-				"description": "Block IP",
-				"human": false,
-			},
-		]
-	},
 	"SIEM alerts": {
 		"manual": [],
 		"automated": [
@@ -535,6 +444,58 @@ export const usecases = {
 			},
 		]
 	},
+	"Ransomware": {
+		"manual": [],
+		"automated": [
+			{
+				"source":	"BOTTOM_LEFT",
+				"target":	"EDR & AV",
+				"description": "EDR & AV alert",
+				"human": false,
+			},
+			{
+				"source":	"EDR & AV",
+				"target":	"SHUFFLE",
+				"description": "",
+				"human": false,
+			},
+			{
+				"source":	"SHUFFLE",
+				"target":	"EDR & AV",
+				"human": false,
+				"description": "isolate",
+			},
+			{
+				"source":	"SHUFFLE",
+				"target":	"IAM",
+				"human": false,
+				"description": "Block access",
+			},
+			{
+				"source":	"SHUFFLE",
+				"target":	"COMMS",
+				"description": "Notify oncall and affected user",
+				"human": false,
+			},
+			{
+				"source":	"SHUFFLE",
+				"target":	"CASES",
+				"description": "Create enriched alert",
+				"human": false,
+			},
+			{
+				"source":	"SHUFFLE",
+				"target":	"CASES",
+				"human": false,
+			},
+			{
+				"source":	"CASES",
+				"target":	"EDR & AV",
+				"description": "Validate alert",
+				"human": true,
+			},
+		]
+	},
 	"Draw": {
 	}
 }

frontend/src/components/Header.jsx

@@ -617,7 +617,7 @@ const { globalUrl, setNotifications, notifications, isLoggedIn, removeCookie, ho
 				<List style={{display: 'flex', flexDirection: 'row-reverse'}} component="nav">
 					<ListItem style={{textAlign: "center"}}>
 						<Link to="/login" style={hrefStyle}>
-							<Button variant="outlined" color="primary" style={{textTransform: "none", borderRadius: 25, padding: "7px 14px 7px 14px", maxWidth: 100, minWidth: 100, }} onClick={() => {
+							<Button variant="outlined" style={{textTransform: "none", borderRadius: 25, padding: "7px 14px 7px 14px", maxWidth: 100, minWidth: 100, }} onClick={() => {
 								if (isCloud) {
 									ReactGA.event({
 										category: "header",
@@ -933,7 +933,8 @@ const { globalUrl, setNotifications, notifications, isLoggedIn, removeCookie, ho
 						<div onMouseOver={handleHomeHover} onMouseOut={handleHomeHoverOut} style={{color: HomeHoverColor, cursor: "pointer"}}> 
 							<Grid container direction="row" alignItems="center">
 								<Grid item>
-									<HomeIcon style={{marginTop: 3, marginRight: 5}} />
+									<img src={"/images/logos/orange_logo.svg"} alt="logo" style={{height: 20, width: 20, marginTop: 3, marginRight: 5, }}/>
+									{/*<HomeIcon style={{marginTop: 3, marginRight: 5}} />*/}
 								</Grid>
 							</Grid>
 						</div>

frontend/src/components/OrgHeader.jsx

@@ -30,6 +30,7 @@ const OrgHeader = (props) => {
     globalUrl,
     isCloud,
 		adminTab,
+  	handleEditOrg, 
   } = props;
 
   const theme = useTheme();
@@ -83,49 +84,6 @@ const OrgHeader = (props) => {
     };
   }
 
-  const handleEditOrg = (
-    name,
-    description,
-    orgId,
-    image,
-    defaults,
-    sso_config
-  ) => {
-
-    const data = {
-      name: name,
-      description: description,
-      org_id: orgId,
-      image: image,
-      defaults: defaults,
-      sso_config: sso_config,
-    };
-
-    const url = globalUrl + `/api/v1/orgs/${selectedOrganization.id}`;
-    fetch(url, {
-      mode: "cors",
-      method: "POST",
-      body: JSON.stringify(data),
-      credentials: "include",
-      crossDomain: true,
-      withCredentials: true,
-      headers: {
-        "Content-Type": "application/json; charset=utf-8",
-      },
-    })
-      .then((response) =>
-        response.json().then((responseJson) => {
-          if (responseJson["success"] === false) {
-            alert.error("Failed updating org: ", responseJson.reason);
-          } else {
-            alert.success("Successfully edited org!");
-          }
-        })
-      )
-      .catch((error) => {
-        alert.error("Err: " + error.toString());
-      });
-  };
 
   var image = "";
   const editHeaderImage = (event) => {
@@ -151,10 +109,9 @@ const OrgHeader = (props) => {
             orgDescription,
             selectedOrganization.id,
             selectedOrganization.image,
-            {
-            },
-            {
-            }
+            {},
+            {},
+						[],
           )
         }
       >

frontend/src/components/ParsedAction.jsx

@@ -1636,12 +1636,12 @@ const ParsedAction = (props) => {
                 onClick={() => {
                   console.log("Clicked field: ", clickedFieldId, data.name)
 
-									if (data.name === "file_id") {
-										console.log("show file video?")
-										if (setShowVideo !== undefined) {
-											setShowVideo("https://www.youtube.com/embed/DPYowyTbsSk")
-										}
-									}
+									//if (data.name === "file_id") {
+									//	console.log("show file video?")
+									//	if (setShowVideo !== undefined) {
+									//		setShowVideo("https://www.youtube.com/embed/DPYowyTbsSk")
+									//	}
+									//}
                   //(data.name.toLowerCase().includes("api") ||
 									/*
                   setExpansionModalOpen(false);

frontend/src/components/UsecaseSearch.jsx

@@ -35,6 +35,7 @@ const defaultValue = {"id": "", "name": "Build your own",
 
 export const usecaseTypes = [{
 	"name": "enrichment",
+	"aliases": ["enrichment", "enrich"],
 	"value": [{
 		"name": "EDR Ticket Enrichment",
 		"usecase_references": ["EDR to ticket"],
@@ -51,6 +52,7 @@ export const usecaseTypes = [{
 	},
 	{
 		"name": "SIEM alert Enrichment",
+		"aliases": ["siem alert enrichment", "siem alert enrich"],
 		"usecase_references": ["SIEM to ticket"],
 		"active": true,
 		"items": [{
@@ -66,6 +68,7 @@ export const usecaseTypes = [{
 	},
 	{
 		"name": "Email Enrichment",
+		"aliases": ["email enrichment", "email enrich"],
 		"usecase_references": ["Email management"],
 		"active": true,
 		"items": [{
@@ -82,6 +85,7 @@ export const usecaseTypes = [{
 },
 {
 	"name": "phishing",
+	"aliases": ["ransomware", "phish"],
 	"value": [
 		{
 			"name": "Email analysis",
@@ -100,6 +104,7 @@ export const usecaseTypes = [{
 	},
 	{
 	"name": "detection",
+	"aliases": ["detection", "detect", "siem alerts", "new detections",],
 	"value": [
 		{
 			"name": "Sigma rule detection",
@@ -118,12 +123,13 @@ export const usecaseTypes = [{
 	},
 	{
 	"name": "response",
+	"aliases": ["response", "respond", "exploits"],
 	"value": [
 		{
 			"name": "EDR host isolation",
 			"active": false,
 			"items": [{
-				"name": "When malicious endpoint activity is detected",
+				"name": "When exploits are detected",
 				"app_type": "edr",
 				"type": "trigger",
 			},
@@ -133,7 +139,45 @@ export const usecaseTypes = [{
 				"type": "subflow",
 			}],
 		}]
-	}
+	},
+	{
+	"name": "vulnerabilities",
+	"aliases": [],
+	"value": [
+		{
+			"name": "Vulnerability is found",
+			"active": false,
+			"items": [{
+				"name": "When a vulnerability is found",
+				"app_type": "assets",
+				"type": "trigger",
+			},
+			{
+				"name": "Patch the vulnerability",
+				"app_type": "edr",
+				"type": "subflow",
+			}],
+		}]
+	},
+	{
+	"name": "approvals",
+	"aliases": ["approval"],
+	"value": [
+		{
+			"name": "Approval is needed",
+			"active": false,
+			"items": [{
+				"name": "When approval is needed",
+				"app_type": "iam",
+				"type": "trigger",
+			},
+			{
+				"name": "Notify the user",
+				"app_type": "communication",
+				"type": "subflow",
+			}],
+		}]
+	},
 ]
 
 export const triggerlist = [