From 9445da32d6c14dc724d916617aa8a9b52c893e1b Mon Sep 17 00:00:00 2001 From: Dan Wolfson Date: Mon, 26 Oct 2026 17:44:58 -0500 Subject: [PATCH] Add Dr.Egeria survey report and security finding commands Step 4 of the odpi/egeria-workspaces#702 security annotations hand-off, in the Security Officer family: - Create/Update Survey Report (Asset Maker, SurveyReportProperties) with Purpose, Start/Completion Time and Report Subjects (ReportSubject). - Create/Update Security Finding, Vulnerability Finding and Penetration Test Finding, and Create/Update Security Posture Summary (Data Discovery). Each is created under its Survey Report (ReportedAnnotation, anchored to the report); Affected Elements (AssociatedAnnotation), Previous Finding (AnnotationExtension) and Vulnerability Type (ReferenceValueAssignment) are synced the same way as the statement of applicability links. - Severity validates against the CVSS ratings: its valid-metadata lookup is scoped to SecurityFindingAnnotation, since unscoped "severity" returns DataQualityRule's values. - Egeria stores the CVSS score, exploit/patch flags and posture counts as primitives, and a merge update that leaves one out resets it (confirmed live). The finding processor copies their current values into every merge update; ISSUE-166 gets the addendum. - Start Time / Completion Time descriptions (shared with Curation's Promise) broadened to cover reports. Verified end to end against the 2026-10-26 quickstart with a throwaway system, two runs and six annotations (since deleted, each checked by GUID). Signed-off-by: Dan Wolfson --- EGERIA_OPEN_ISSUES.md | 2 + PYEGERIA_ISSUES.md | 2 + docs/dr_egeria_manual.md | 1 + .../commands_curation_compact.json | 4 +- .../commands_security_officer_compact.json | 758 + md_processing/data/generated_format_sets.json | 11544 ++++++++++++++++ md_processing/dr_egeria.py | 8 + md_processing/v2/__init__.py | 5 +- md_processing/v2/security_officer.py | 255 +- pyegeria/view/base_report_formats.py | 10 + .../advanced/Curation/Classify_Promise.md | 4 +- .../Create_Penetration_Test_Finding.md | 586 + .../Create_Security_Finding.md | 546 + .../Create_Security_Posture_Summary.md | 492 + .../Security Officer/Create_Survey_Report.md | 436 + .../Create_Vulnerability_Finding.md | 578 + .../basic/Curation/Classify_Promise.md | 4 +- .../Create_Penetration_Test_Finding.md | 254 + .../Create_Security_Finding.md | 214 + .../Create_Security_Posture_Summary.md | 176 + .../Security Officer/Create_Survey_Report.md | 128 + .../Create_Vulnerability_Finding.md | 246 + .../dr_test_security_findings.md | 282 + tests/dr-egeria-command-tests/run_dr_tests.py | 1 + .../test_dr_egeria_security_officer.py | 133 + 25 files changed, 16651 insertions(+), 18 deletions(-) create mode 100644 sample-data/templates/advanced/Security Officer/Create_Penetration_Test_Finding.md create mode 100644 sample-data/templates/advanced/Security Officer/Create_Security_Finding.md create mode 100644 sample-data/templates/advanced/Security Officer/Create_Security_Posture_Summary.md create mode 100644 sample-data/templates/advanced/Security Officer/Create_Survey_Report.md create mode 100644 sample-data/templates/advanced/Security Officer/Create_Vulnerability_Finding.md create mode 100644 sample-data/templates/basic/Security Officer/Create_Penetration_Test_Finding.md create mode 100644 sample-data/templates/basic/Security Officer/Create_Security_Finding.md create mode 100644 sample-data/templates/basic/Security Officer/Create_Security_Posture_Summary.md create mode 100644 sample-data/templates/basic/Security Officer/Create_Survey_Report.md create mode 100644 sample-data/templates/basic/Security Officer/Create_Vulnerability_Finding.md create mode 100644 tests/dr-egeria-command-tests/dr_test_security_findings.md diff --git a/EGERIA_OPEN_ISSUES.md b/EGERIA_OPEN_ISSUES.md index 7d0c09a3..3e942c3d 100644 --- a/EGERIA_OPEN_ISSUES.md +++ b/EGERIA_OPEN_ISSUES.md @@ -54,6 +54,8 @@ So "never set" and "set to 0 / false" come back identical. Confirmed live on 202 **Question for the Egeria team (Mandy):** could these become boxed types (`Float`, `Boolean`, `Long`, `Integer`) with a `null` default, so that an unset value is omitted from the response? `cvssScore` matters most: a CVSS score of 0.0 is a real rating (severity "None"). +**Addendum 2026-10-26 (later the same day): a merge update wipes these fields.** While live-testing the Dr.Egeria finding commands (step 4), a `PenetrationTestFindingAnnotation` created with `cvssScore: 8.6` and `exploitAvailable: true` was updated with `mergeUpdate: true` and only `reproductionSteps` in the properties. Afterwards it held `cvssScore: 0.0` and `exploitAvailable: false`. Egeria cannot tell a primitive that was left out of a merge update from one set to 0 / false, so it stores the default over the current value. So any merge update of a security annotation resets the CVSS score, the exploit and patch flags, and the posture counts it doesn't mention. This raises the question above from "an unset value reads as 0" to "an update loses data". **pyegeria workaround (step 4 PR):** Dr.Egeria's `SecurityFindingProcessor` copies those fields' current values into every merge update unless the command sets them (verified live: the same update then kept 8.6 / true). Callers of `DataDiscovery.update_annotation` must do the same until Egeria changes. + **pyegeria workaround (PR #495, until then):** the security report rows (`DataDiscovery._security_row`, behind the `Security-Findings`, `Penetration-Test-Findings` and `Security-Posture` report specs) leave a value blank where a 0 or false would read as an answer nobody gave: - a CVSS score of 0.0 is shown only when the severity is "None"; - `exploitAvailable` and `patchAvailable` are shown only when true; diff --git a/PYEGERIA_ISSUES.md b/PYEGERIA_ISSUES.md index 7a937317..479781ee 100644 --- a/PYEGERIA_ISSUES.md +++ b/PYEGERIA_ISSUES.md @@ -1852,6 +1852,8 @@ So "never set" and "set to 0 / false" come back identical. Confirmed live on 202 **Question for the Egeria team (Mandy):** could these become boxed types (`Float`, `Boolean`, `Long`, `Integer`) with a `null` default, so that an unset value is omitted from the response? `cvssScore` matters most: a CVSS score of 0.0 is a real rating (severity "None"). +**Addendum 2026-10-26 (later the same day): a merge update wipes these fields.** While live-testing the Dr.Egeria finding commands (step 4), a `PenetrationTestFindingAnnotation` created with `cvssScore: 8.6` and `exploitAvailable: true` was updated with `mergeUpdate: true` and only `reproductionSteps` in the properties. Afterwards it held `cvssScore: 0.0` and `exploitAvailable: false`. Egeria cannot tell a primitive that was left out of a merge update from one set to 0 / false, so it stores the default over the current value. So any merge update of a security annotation resets the CVSS score, the exploit and patch flags, and the posture counts it doesn't mention. This raises the question above from "an unset value reads as 0" to "an update loses data". **pyegeria workaround (step 4 PR):** Dr.Egeria's `SecurityFindingProcessor` copies those fields' current values into every merge update unless the command sets them (verified live: the same update then kept 8.6 / true). Callers of `DataDiscovery.update_annotation` must do the same until Egeria changes. + **pyegeria workaround (PR #495, until then):** the security report rows (`DataDiscovery._security_row`, behind the `Security-Findings`, `Penetration-Test-Findings` and `Security-Posture` report specs) leave a value blank where a 0 or false would read as an answer nobody gave: - a CVSS score of 0.0 is shown only when the severity is "None"; - `exploitAvailable` and `patchAvailable` are shown only when true; diff --git a/docs/dr_egeria_manual.md b/docs/dr_egeria_manual.md index 5254452d..1f9eb7ab 100644 --- a/docs/dr_egeria_manual.md +++ b/docs/dr_egeria_manual.md @@ -269,6 +269,7 @@ Dr.Egeria organizes its commands into "families," each corresponding to a specif - **Governance Officer**: Manage governance definitions, policies, and responsibilities. - **Security Officer** (added 2026-10-26, Egeria 6.3): Statements of applicability — the record of which controls from a standard (such as ISO/IEC 27001 Annex A) apply to the organization, why, and how far each is implemented. Processors in `md_processing/v2/security_officer.py`. - `Create`/`Update Statement of Applicability`: an AuthoredReferenceable with `Scope`, `Review Date`, `Authors` and `Content Status` (set APPROVED before an audit). `Certification Standard` links the certification type it is assessed against (GovernedBy); `Scoped By` links the organization, site or system it covers (ScopedBy). Leaving either out leaves its links alone; `Merge Update: false` also removes links the command no longer lists. + - Security testing results (model 0665): `Create`/`Update Survey Report` catalogues one test run, through Asset Maker. It takes Category (e.g. Penetration Test Results), Purpose, Start Time and Completion Time; `Report Subjects` links the assets the run tested (ReportSubject). `Create`/`Update Security Finding`, `Vulnerability Finding` and `Penetration Test Finding` each create one finding under its `Survey Report` (ReportedAnnotation, required), with Severity (the CVSS ratings None/Low/Medium/High/Critical), CVSS Score and the type's own fields. `Affected Elements` links catalogued elements (AssociatedAnnotation), `Previous Finding` links the same finding in an earlier run (AnnotationExtension), and `Vulnerability Type` links a reference data value (ReferenceValueAssignment). `Create Security Posture Summary` records a run's counts: `Finding Counts By Severity` takes one `severity: count` pair per line. Egeria stores the CVSS score, exploit/patch flags and posture counts as primitives, so a merge update that leaves one out would reset it to 0 / false; these commands copy the current value into the update to prevent that (ISSUE-166). Processors in `md_processing/v2/security_officer.py`. - `Link`/`Unlink Control Applicability`: assess a control (any governance definition, typically a GovernanceControl) in a statement — `Is Applicable`, `Justification`, `Inclusion Reasons`, `Implementation Status` (NOT_STARTED, PLANNED, PARTIALLY_IMPLEMENTED, IMPLEMENTED, OTHER), `Implementation Description`, `Review Date`, and `Label` for the control's number in the standard. There is one relationship per control, and re-running Link updates it. Egeria's attach replaces the relationship's properties wholesale, so the command starts from the existing ones: re-linking with just a new status keeps the justification and the rest (`Merge Update: false` replaces them). - Reports: `Statement-of-Applicability-Controls` (one row per control — use `LIST` for a markdown table, `DICT` for a spreadsheet) and `Statement-of-Applicability-Implementation-Summary` (applicable controls counted by implementation status; `BAR`/`PIE` for a chart). Both take `soa_guid`, which accepts the statement's GUID or qualified name, e.g. `View Report` with `Report Parameters` `soa_guid: StatementOfApplicability::Coco Pharmaceuticals ISMS`. The summary is analytic-function-backed, which `View Report` cannot run yet; use it through `exec_report_spec` or `SecurityOfficer.get_control_implementation_summary`. - **Action Author**: Define governance action process flows — reusable single-step action types and multi-step processes — and wire them to the engines and elements that execute them, without writing code (e.g., `Create Governance Action Process`, `Create Governance Action Process Step`, `Link First Process Step`, `Link Next Process Step`, `Link Action to Action Executor`, `Link Action to Target`). diff --git a/md_processing/data/compact_commands/commands_curation_compact.json b/md_processing/data/compact_commands/commands_curation_compact.json index 0e014fd7..b1b70070 100644 --- a/md_processing/data/compact_commands/commands_curation_compact.json +++ b/md_processing/data/compact_commands/commands_curation_compact.json @@ -2900,7 +2900,7 @@ "default_value": "", "valid_values": [], "existing_element": "", - "description": "Date/time (ISO 8601) that work started on delivering the promised resource.", + "description": "Date/time (ISO 8601) that the work started - for a promise, work on delivering the promised resource; for a report, the run that produced it.", "generated": false, "style": "Simple", "user_specified": true, @@ -2938,7 +2938,7 @@ "default_value": "", "valid_values": [], "existing_element": "", - "description": "Date/time (ISO 8601) that the promised resource was delivered.", + "description": "Date/time (ISO 8601) that the work finished - for a promise, when the promised resource was delivered; for a report, when the run completed.", "generated": false, "style": "Simple", "user_specified": true, diff --git a/md_processing/data/compact_commands/commands_security_officer_compact.json b/md_processing/data/compact_commands/commands_security_officer_compact.json index 02e9dae5..4d57cc89 100644 --- a/md_processing/data/compact_commands/commands_security_officer_compact.json +++ b/md_processing/data/compact_commands/commands_security_officer_compact.json @@ -1117,6 +1117,621 @@ "max_cardinality": 1, "level": "Basic", "Journal Entry": "" + }, + "Purpose": { + "variable_name": "purpose", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "The purpose of this collection \u2014 a short description of why it exists or what it is used for.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 1, + "max_cardinality": 1, + "level": "Common", + "Journal Entry": "" + }, + "Start Time": { + "variable_name": "start_time", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Date/time (ISO 8601) that the work started - for a promise, work on delivering the promised resource; for a report, the run that produced it.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Domain", + "Journal Entry": "Added 2026-09-30 -- Promise classification (0010), Classification Explorer setElementAsPromise." + }, + "Completion Time": { + "variable_name": "completion_time", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Date/time (ISO 8601) that the work finished - for a promise, when the promised resource was delivered; for a report, when the run completed.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Domain", + "Journal Entry": "Added 2026-09-30 -- Promise classification (0010), Classification Explorer setElementAsPromise." + }, + "Summary": { + "variable_name": "summary", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "A short summary of the element's meaning or purpose.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Domain", + "Journal Entry": "" + }, + "Report Subjects": { + "variable_name": "report_subjects", + "inUpdate": true, + "attr_labels": "", + "examples": "Asset::Supplier Portal", + "default_value": "", + "valid_values": [], + "existing_element": "Referenceable", + "description": "The assets or other elements that the run tested. Each is linked with a ReportSubject relationship.", + "generated": false, + "style": "Reference Name List", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": -1, + "level": "Basic", + "Journal Entry": "" + }, + "Survey Report": { + "variable_name": "survey_report", + "inUpdate": true, + "attr_labels": "", + "examples": "SurveyReport::Supplier Portal::2026-Q4 Penetration Test", + "default_value": "", + "valid_values": [], + "existing_element": "SurveyReport", + "description": "The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship.", + "generated": false, + "style": "Reference Name", + "user_specified": true, + "unique": false, + "input_required": true, + "min_cardinality": 1, + "max_cardinality": 1, + "level": "Domain", + "Journal Entry": "" + }, + "Severity": { + "variable_name": "severity", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ], + "existing_element": "", + "description": "The CVSS severity rating of the finding.", + "generated": false, + "style": "Valid Value", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "", + "type_name": "SecurityFindingAnnotation" + }, + "CVSS Score": { + "variable_name": "cvss_score", + "inUpdate": true, + "attr_labels": "", + "examples": "8.6", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "CVSS base score, 0.0 to 10.0.", + "generated": false, + "style": "Simple Float", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "CVSS Vector": { + "variable_name": "cvss_vector", + "inUpdate": true, + "attr_labels": "", + "examples": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "The CVSS vector string.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Advanced", + "Journal Entry": "" + }, + "Vulnerability Identifiers": { + "variable_name": "vulnerability_identifiers", + "inUpdate": true, + "attr_labels": "", + "examples": "CVE-2021-44228", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Identifiers of the vulnerability, such as CVE identifiers.", + "generated": false, + "style": "Simple List", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Weakness Identifiers": { + "variable_name": "weakness_identifiers", + "inUpdate": true, + "attr_labels": "", + "examples": "CWE-89", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Identifiers of the weakness, such as CWE identifiers.", + "generated": false, + "style": "Simple List", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Affected Location": { + "variable_name": "affected_location", + "inUpdate": true, + "attr_labels": "", + "examples": "https://supplier-portal/search", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Where the finding is: host and port, URL, file path or package.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Evidence": { + "variable_name": "evidence", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "What demonstrated the finding, such as the request and response.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Remediation": { + "variable_name": "remediation", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "The recommended fix.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Exploit Available": { + "variable_name": "exploit_available", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Whether an exploit is publicly available.", + "generated": false, + "style": "Bool", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Affected Elements": { + "variable_name": "affected_elements", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "Referenceable", + "description": "Catalogued elements the finding affects - the tested asset, and any catalogued element at the affected location or among the compromised resources. Each is linked with an AssociatedAnnotation relationship.", + "generated": false, + "style": "Reference Name List", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": -1, + "level": "Basic", + "Journal Entry": "" + }, + "Previous Finding": { + "variable_name": "previous_finding", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "Annotation", + "description": "The same finding in an earlier run. Linked with an AnnotationExtension relationship.", + "generated": false, + "style": "Reference Name", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Vulnerability Type": { + "variable_name": "vulnerability_type", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "ValidValueDefinition", + "description": "A reference data value naming the type of vulnerability. Linked with a ReferenceValueAssignment relationship.", + "generated": false, + "style": "Reference Name", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Advanced", + "Journal Entry": "" + }, + "Package URL": { + "variable_name": "package_url", + "inUpdate": true, + "attr_labels": "", + "examples": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Package URL (purl) of the vulnerable software.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Installed Version": { + "variable_name": "installed_version", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "The installed version of the vulnerable software.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Fixed Version": { + "variable_name": "fixed_version", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "The first version with the fix.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Patch Available": { + "variable_name": "patch_available", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Whether a patch is available.", + "generated": false, + "style": "Bool", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Attack Vector": { + "variable_name": "attack_vector", + "inUpdate": true, + "attr_labels": "", + "examples": "Network", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "How the weakness was reached, such as Network, Adjacent network, Local, Physical or Social engineering.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Attack Techniques": { + "variable_name": "attack_techniques", + "inUpdate": true, + "attr_labels": "", + "examples": "T1190", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Techniques used, such as MITRE ATT&CK technique identifiers.", + "generated": false, + "style": "Simple List", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Privileges Gained": { + "variable_name": "privileges_gained", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "The privileges the tester gained.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Compromised Resources": { + "variable_name": "compromised_resources", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Names of the resources reached or controlled.", + "generated": false, + "style": "Simple List", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Reproduction Steps": { + "variable_name": "reproduction_steps", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "How to reproduce the finding.", + "generated": false, + "style": "Simple", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Finding Counts By Severity": { + "variable_name": "finding_counts_by_severity", + "inUpdate": true, + "attr_labels": "", + "examples": "Critical: 1", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Number of findings at each severity, one 'severity: count' pair per line (or a JSON object).", + "generated": false, + "style": "Dictionary", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Resources In Scope Count": { + "variable_name": "resources_in_scope_count", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Number of resources in scope for the run.", + "generated": false, + "style": "Simple Int", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Resources Tested Count": { + "variable_name": "resources_tested_count", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Number of resources the run tested.", + "generated": false, + "style": "Simple Int", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "New Finding Count": { + "variable_name": "new_finding_count", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Findings seen for the first time in this run.", + "generated": false, + "style": "Simple Int", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" + }, + "Resolved Finding Count": { + "variable_name": "resolved_finding_count", + "inUpdate": true, + "attr_labels": "", + "examples": "", + "default_value": "", + "valid_values": [], + "existing_element": "", + "description": "Findings from earlier runs that are no longer detected.", + "generated": false, + "style": "Simple Int", + "user_specified": true, + "unique": false, + "input_required": false, + "min_cardinality": 0, + "max_cardinality": 1, + "level": "Basic", + "Journal Entry": "" } }, "bundles": { @@ -1197,6 +1812,33 @@ "Scope", "Review Date" ] + }, + "Survey Report": { + "inherits": "Referenceable", + "own_attributes": [ + "Purpose", + "Start Time", + "Completion Time" + ] + }, + "Security Finding": { + "inherits": "Authored Referenceable", + "own_attributes": [ + "Survey Report", + "Summary", + "Severity", + "CVSS Score", + "CVSS Vector", + "Vulnerability Identifiers", + "Weakness Identifiers", + "Affected Location", + "Evidence", + "Remediation", + "Exploit Available", + "Affected Elements", + "Previous Finding", + "Vulnerability Type" + ] } }, "commands": { @@ -1250,6 +1892,122 @@ "Review Date", "Merge Update" ] + }, + "Create Survey Report": { + "alternate_names": [], + "family": "Security Officer", + "upsert": true, + "attach": false, + "level": "Basic", + "find_method": "AssetMaker.find_assets", + "find_constraints": "{\"metadata_element_type\": \"SurveyReport\"}", + "extra_find": "", + "extra_constraints": "", + "Journal Entry": "", + "verb": "Create", + "display_name": "Survey Report", + "qn_prefix": "SurveyReport", + "OM_TYPE": "SurveyReport", + "bundle": "Survey Report", + "custom_attributes": [ + "Report Subjects" + ], + "description": "A survey report catalogues one run of an analysis, such as a vulnerability scan or penetration test. Category says what kind of test it was, for example Penetration Test Results." + }, + "Create Security Finding": { + "alternate_names": [], + "family": "Security Officer", + "upsert": true, + "attach": false, + "level": "Basic", + "find_method": "", + "find_constraints": "", + "extra_find": "", + "extra_constraints": "", + "Journal Entry": "", + "verb": "Create", + "display_name": "Security Finding", + "qn_prefix": "SecurityFinding", + "OM_TYPE": "SecurityFindingAnnotation", + "bundle": "Security Finding", + "custom_attributes": [], + "description": "A security finding from a test run that is neither a known vulnerability nor a penetration test finding, such as an insecure configuration." + }, + "Create Vulnerability Finding": { + "alternate_names": [], + "family": "Security Officer", + "upsert": true, + "attach": false, + "level": "Basic", + "find_method": "", + "find_constraints": "", + "extra_find": "", + "extra_constraints": "", + "Journal Entry": "", + "verb": "Create", + "display_name": "Vulnerability Finding", + "qn_prefix": "VulnerabilityFinding", + "OM_TYPE": "VulnerabilityAnnotation", + "bundle": "Security Finding", + "custom_attributes": [ + "Package URL", + "Installed Version", + "Fixed Version", + "Patch Available" + ], + "description": "A known vulnerability in the software a resource uses, typically from a vulnerability scan." + }, + "Create Penetration Test Finding": { + "alternate_names": [], + "family": "Security Officer", + "upsert": true, + "attach": false, + "level": "Basic", + "find_method": "", + "find_constraints": "", + "extra_find": "", + "extra_constraints": "", + "Journal Entry": "", + "verb": "Create", + "display_name": "Penetration Test Finding", + "qn_prefix": "PenetrationTestFinding", + "OM_TYPE": "PenetrationTestFindingAnnotation", + "bundle": "Security Finding", + "custom_attributes": [ + "Attack Vector", + "Attack Techniques", + "Privileges Gained", + "Compromised Resources", + "Reproduction Steps" + ], + "description": "A weakness a penetration test was able to exploit." + }, + "Create Security Posture Summary": { + "alternate_names": [], + "family": "Security Officer", + "upsert": true, + "attach": false, + "level": "Basic", + "find_method": "", + "find_constraints": "", + "extra_find": "", + "extra_constraints": "", + "Journal Entry": "", + "verb": "Create", + "display_name": "Security Posture Summary", + "qn_prefix": "SecurityPosture", + "OM_TYPE": "SecurityPostureAnnotation", + "bundle": "Authored Referenceable", + "custom_attributes": [ + "Survey Report", + "Summary", + "Finding Counts By Severity", + "Resources In Scope Count", + "Resources Tested Count", + "New Finding Count", + "Resolved Finding Count" + ], + "description": "The summary of one security test run: findings by severity, resources in scope and tested, and new and resolved findings." } } } diff --git a/md_processing/data/generated_format_sets.json b/md_processing/data/generated_format_sets.json index 8900880a..c398eab1 100644 --- a/md_processing/data/generated_format_sets.json +++ b/md_processing/data/generated_format_sets.json @@ -233659,6 +233659,11550 @@ "get_additional_props": null, "question_spec": null }, + "Survey-Report-DrE-Basic": { + "target_type": "Survey Report", + "heading": "Survey-Report-DrE-Basic Attributes", + "description": "Auto-generated format for Survey Report (Create, Basic).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + } + ], + "action": { + "function": "AssetMaker.find_assets", + "required_params": [ + "search_string" + ], + "optional_params": [ + "sequencing_order", + "sequencing_property", + "page_size", + "start_from", + "starts_with", + "ends_with", + "ignore_case", + "classification_names", + "metadata_element_subtypes", + "metadata_element_type" + ], + "spec_params": { + "metadata_element_type": "SurveyReport" + }, + "analytic_function": null, + "analytic_spec_params": {}, + "analytic_binders": {} + }, + "get_additional_props": null, + "question_spec": null + }, + "Survey-Report-DrE-Advanced": { + "target_type": "Survey Report", + "heading": "Survey-Report-DrE-Advanced Attributes", + "description": "Auto-generated format for Survey Report (Create, Advanced).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ], + "columns": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Purpose", + "key": "purpose", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Start Time", + "key": "start_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Completion Time", + "key": "completion_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Report Subjects", + "key": "report_subjects", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ] + } + ], + "action": { + "function": "AssetMaker.find_assets", + "required_params": [ + "search_string" + ], + "optional_params": [ + "sequencing_order", + "sequencing_property", + "page_size", + "start_from", + "starts_with", + "ends_with", + "ignore_case", + "classification_names", + "metadata_element_subtypes", + "metadata_element_type" + ], + "spec_params": { + "metadata_element_type": "SurveyReport" + }, + "analytic_function": null, + "analytic_spec_params": {}, + "analytic_binders": {} + }, + "get_additional_props": null, + "question_spec": null + }, + "Security-Finding-DrE-Basic": { + "target_type": "Security Finding", + "heading": "Security-Finding-DrE-Basic Attributes", + "description": "Auto-generated format for Security Finding (Create, Basic).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, + "Security-Finding-DrE-Advanced": { + "target_type": "Security Finding", + "heading": "Security-Finding-DrE-Advanced Attributes", + "description": "Auto-generated format for Security Finding (Create, Advanced).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ], + "columns": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, + "Vulnerability-Finding-DrE-Basic": { + "target_type": "Vulnerability Finding", + "heading": "Vulnerability-Finding-DrE-Basic Attributes", + "description": "Auto-generated format for Vulnerability Finding (Create, Basic).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, + "Vulnerability-Finding-DrE-Advanced": { + "target_type": "Vulnerability Finding", + "heading": "Vulnerability-Finding-DrE-Advanced Attributes", + "description": "Auto-generated format for Vulnerability Finding (Create, Advanced).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ], + "columns": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Package URL", + "key": "package_url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Installed Version", + "key": "installed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Fixed Version", + "key": "fixed_version", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Patch Available", + "key": "patch_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, + "Penetration-Test-Finding-DrE-Basic": { + "target_type": "Penetration Test Finding", + "heading": "Penetration-Test-Finding-DrE-Basic Attributes", + "description": "Auto-generated format for Penetration Test Finding (Create, Basic).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, + "Penetration-Test-Finding-DrE-Advanced": { + "target_type": "Penetration Test Finding", + "heading": "Penetration-Test-Finding-DrE-Advanced Attributes", + "description": "Auto-generated format for Penetration Test Finding (Create, Advanced).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ], + "columns": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Severity", + "key": "severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "None", + "Low", + "Medium", + "High", + "Critical" + ] + }, + { + "name": "CVSS Score", + "key": "cvss_score", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "CVSS Vector", + "key": "cvss_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Identifiers", + "key": "vulnerability_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Weakness Identifiers", + "key": "weakness_identifiers", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Location", + "key": "affected_location", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Evidence", + "key": "evidence", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Remediation", + "key": "remediation", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Exploit Available", + "key": "exploit_available", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Affected Elements", + "key": "affected_elements", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Previous Finding", + "key": "previous_finding", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Vulnerability Type", + "key": "vulnerability_type", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Vector", + "key": "attack_vector", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Attack Techniques", + "key": "attack_techniques", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Privileges Gained", + "key": "privileges_gained", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Compromised Resources", + "key": "compromised_resources", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Reproduction Steps", + "key": "reproduction_steps", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, + "Security-Posture-Summary-DrE-Basic": { + "target_type": "Security Posture Summary", + "heading": "Security-Posture-Summary-DrE-Basic Attributes", + "description": "Auto-generated format for Security Posture Summary (Create, Basic).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, + "Security-Posture-Summary-DrE-Advanced": { + "target_type": "Security Posture Summary", + "heading": "Security-Posture-Summary-DrE-Advanced Attributes", + "description": "Auto-generated format for Security Posture Summary (Create, Advanced).", + "aliases": [], + "annotations": {}, + "family": "Security Officer", + "formats": [ + { + "types": [ + "LIST" + ], + "attributes": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ], + "columns": [ + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + } + ] + }, + { + "types": [ + "ALL" + ], + "attributes": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ], + "columns": [ + { + "name": "Effective From", + "key": "effective_from", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective Time", + "key": "effective_time", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Effective To", + "key": "effective_to", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Glossary Term", + "key": "glossary_term", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Is Own Anchor", + "key": "is_own_anchor", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Status", + "key": "status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Zone Membership", + "key": "zone_membership", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Additional Properties", + "key": "additional_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Category", + "key": "category", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Confidence Classification", + "key": "confidence_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "AD_HOC", + "TRANSACTIONAL", + "AUTHORITATIVE", + "DERIVED", + "OBSOLETE", + "OTHER" + ] + }, + { + "name": "Confidentiality Classification", + "key": "confidentiality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "INTERNAL", + "CONFIDENTIAL", + "SENSITIVE", + "RESTRICTED", + "OTHER" + ] + }, + { + "name": "Criticality Classification", + "key": "criticality_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "MARGINAL", + "IMPORTANT", + "CRITICAL", + "CATASTROPHIC", + "OTHER" + ] + }, + { + "name": "Description", + "key": "description", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Display Name", + "key": "display_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "GUID", + "key": "guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Identifier", + "key": "identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Impact Classification", + "key": "impact_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "LOW", + "MEDIUM", + "HIGH", + "OTHER" + ] + }, + { + "name": "Legal", + "key": "legal", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Policy Management Point", + "key": "policy_management_point", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Qualified Name", + "key": "qualified_name", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Retention Classification", + "key": "retention_classification", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "UNCLASSIFIED", + "TEMPORARY", + "PROJECT_LIFETIME", + "TEAM_LIFETIME", + "CONTRACT_LIFETIME", + "REGULATED_LIFETIME", + "TIMEBOXED_LIFETIME", + "OTHER" + ] + }, + { + "name": "Security Tags", + "key": "security_tags", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "URL", + "key": "url", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Version Identifier", + "key": "version_identifier", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Authors", + "key": "authors", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Content Status", + "key": "content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [ + "DRAFT", + "PREPARED", + "PROPOSED", + "APPROVED", + "REJECTED", + "ACTIVE", + "DEPRECATED", + "OTHER" + ] + }, + { + "name": "User Defined Content Status", + "key": "user_defined_content_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Survey Report", + "key": "survey_report", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Summary", + "key": "summary", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Finding Counts By Severity", + "key": "finding_counts_by_severity", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources In Scope Count", + "key": "resources_in_scope_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resources Tested Count", + "key": "resources_tested_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "New Finding Count", + "key": "new_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "Resolved Finding Count", + "key": "resolved_finding_count", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": [] + }, + { + "name": "User Defined Status", + "key": "user_defined_status", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Classifications", + "key": "classifications", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Anchor Scope Name", + "key": "anchor_scope_guid", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + }, + { + "name": "Supplementary Properties", + "key": "supplementary_properties", + "value": null, + "format": false, + "detail_spec": null, + "valid_values": null + } + ] + } + ], + "action": null, + "get_additional_props": null, + "question_spec": null + }, "Information-Supply-Chain-DrE-Basic": { "target_type": "Information Supply Chain", "heading": "Information-Supply-Chain-DrE-Basic Attributes", diff --git a/md_processing/dr_egeria.py b/md_processing/dr_egeria.py index 09536456..60b27731 100644 --- a/md_processing/dr_egeria.py +++ b/md_processing/dr_egeria.py @@ -44,6 +44,7 @@ CreateDashboardSheetProcessor, LinkReportToDashboardSheetProcessor, AddTextOnDashboardSheetProcessor, ReportProcessor, StatementOfApplicabilityProcessor, ControlApplicabilityLinkProcessor, + SurveyReportProcessor, SecurityFindingProcessor, SavedQueryProcessor, SmartQueryLinkProcessor, CurationClassifyProcessor, CurationLinkProcessor, CLASSIFICATION_METHODS, ReferenceDataLinkProcessor, ValidMetadataValueProcessor, ReferenceDataElementProcessor, ValidValueLinkProcessor, @@ -483,6 +484,13 @@ def reg(base, cls): reg("Update Statement of Applicability", StatementOfApplicabilityProcessor) for verb in ("Link", "Attach", "Add", "Unlink", "Detach", "Remove"): reg(f"{verb} Control Applicability", ControlApplicabilityLinkProcessor) + + # Security Officer -- security testing results (Egeria 6.3, model 0665) + for verb in ("Create", "Update"): + reg(f"{verb} Survey Report", SurveyReportProcessor) + for finding in ("Security Finding", "Vulnerability Finding", "Penetration Test Finding", + "Security Posture Summary"): + reg(f"{verb} {finding}", SecurityFindingProcessor) reg("Create Saved Query", SavedQueryProcessor) reg("Update Saved Query", SavedQueryProcessor) reg("Link Saved Query to Results Set", SmartQueryLinkProcessor) diff --git a/md_processing/v2/__init__.py b/md_processing/v2/__init__.py index 821fb568..79383332 100644 --- a/md_processing/v2/__init__.py +++ b/md_processing/v2/__init__.py @@ -36,7 +36,10 @@ from .actor_manager import ActorManagerProcessor, ActorManagerLinkProcessor from .dashboard_sheet import CreateDashboardSheetProcessor, LinkReportToDashboardSheetProcessor, AddTextOnDashboardSheetProcessor from .report import ReportProcessor -from .security_officer import StatementOfApplicabilityProcessor, ControlApplicabilityLinkProcessor +from .security_officer import ( + StatementOfApplicabilityProcessor, ControlApplicabilityLinkProcessor, SurveyReportProcessor, + SecurityFindingProcessor, +) from .saved_query import SavedQueryProcessor, SmartQueryLinkProcessor from .curation import CurationClassifyProcessor, CurationLinkProcessor, CLASSIFICATION_METHODS from .reference_data import (ReferenceDataLinkProcessor, ValidMetadataValueProcessor, ReferenceDataElementProcessor, diff --git a/md_processing/v2/security_officer.py b/md_processing/v2/security_officer.py index bd310d8d..b7e62afd 100644 --- a/md_processing/v2/security_officer.py +++ b/md_processing/v2/security_officer.py @@ -3,7 +3,9 @@ Handles statements of applicability (Egeria 6.3): `Create/Update Statement of Applicability` and `Link/Unlink Control Applicability`, built on the -SecurityOfficer OMVS client. +SecurityOfficer OMVS client; and security testing results: `Create/Update +Survey Report` (Asset Maker) and the security finding and posture summary +commands (Data Discovery) -- see the section further down. A statement records which controls from a standard (for example the Annex A controls of ISO/IEC 27001) apply to the organization, why, and how far each is @@ -73,6 +75,16 @@ def _plain_rel_body(attributes: Dict[str, Any]) -> Dict[str, Any]: return body_slimmer(body) +def _report_sync(processor: AsyncBaseCommandProcessor, label: str, res: Dict[str, Any]) -> None: + """Record a sync_members result as related results on the command's output.""" + for g in res.get("added", []): + processor.add_related_result(label, g) + for g in res.get("removed", []): + processor.add_related_result(label, g, message="removed") + if res.get("errors"): + processor.add_related_result(label, status="failure", message="; ".join(res["errors"])) + + class StatementOfApplicabilityProcessor(AsyncBaseCommandProcessor): """Processor for Create Statement of Applicability (and its Update transition).""" @@ -142,7 +154,7 @@ async def _sync_relationships(self, guid: str, attributes: Dict[str, Any], repla guid, g, body_slimmer(set_delete_rel_request_body("GovernedBy", attributes))), replace_all=replace_all, ) - self._report_sync("Certification Standard", res) + _report_sync(self, "Certification Standard", res) if attributes.get("Scoped By", {}).get("value"): to_be = set(attributes["Scoped By"].get("guid_list") or []) @@ -157,15 +169,7 @@ async def _sync_relationships(self, guid: str, attributes: Dict[str, Any], repla body=body_slimmer(set_delete_rel_request_body("ScopedBy", attributes))), replace_all=replace_all, ) - self._report_sync("Scoped By", res) - - def _report_sync(self, label: str, res: Dict[str, Any]) -> None: - for g in res.get("added", []): - self.add_related_result(label, g) - for g in res.get("removed", []): - self.add_related_result(label, g, message="removed") - if res.get("errors"): - self.add_related_result(label, status="failure", message="; ".join(res["errors"])) + _report_sync(self, "Scoped By", res) class ControlApplicabilityLinkProcessor(AsyncBaseCommandProcessor): @@ -252,3 +256,232 @@ async def _existing_applicability(self, soa_guid: str, control_guid: str) -> Dic return {k: v for k, v in (rel.get("relationshipProperties") or {}).items() if k not in ("class", "typeName")} return {} + + +# +# Security testing results (Egeria 6.3, model 0665). Each test run is a SurveyReport asset; +# each finding is a SecurityFindingAnnotation (or its Vulnerability / PenetrationTestFinding +# subtypes) and the run's summary a SecurityPostureAnnotation, linked to the report with +# ReportedAnnotation: +# +# SurveyReport --ReportSubject--> asset that was tested +# SurveyReport --ReportedAnnotation--> finding / posture summary +# affected element --AssociatedAnnotation--> finding +# finding from the previous run --AnnotationExtension--> the same finding in this run +# finding --ReferenceValueAssignment--> vulnerability type (reference data value) +# + +# Dr.Egeria attribute -> Egeria property, for the annotation types' own properties. +_ANNOTATION_FIELDS = { + "Summary": "summary", + "Severity": "severity", + "CVSS Score": "cvssScore", + "CVSS Vector": "cvssVector", + "Vulnerability Identifiers": "vulnerabilityIdentifiers", + "Weakness Identifiers": "weaknessIdentifiers", + "Affected Location": "affectedLocation", + "Evidence": "evidence", + "Remediation": "remediation", + "Exploit Available": "exploitAvailable", + "Package URL": "packageURL", + "Installed Version": "installedVersion", + "Fixed Version": "fixedVersion", + "Patch Available": "patchAvailable", + "Attack Vector": "attackVector", + "Attack Techniques": "attackTechniques", + "Privileges Gained": "privilegesGained", + "Compromised Resources": "compromisedResources", + "Reproduction Steps": "reproductionSteps", + "Finding Counts By Severity": "findingCountsBySeverity", + "Resources In Scope Count": "resourcesInScopeCount", + "Resources Tested Count": "resourcesTestedCount", + "New Finding Count": "newFindingCount", + "Resolved Finding Count": "resolvedFindingCount", +} + + +# Egeria declares these as Java primitives, so a merge update that leaves one out stores +# its 0 / false default over the current value (confirmed live, ISSUE-166). +_PRIMITIVE_FIELDS = ("cvssScore", "exploitAvailable", "patchAvailable", "resourcesInScopeCount", + "resourcesTestedCount", "newFindingCount", "resolvedFindingCount") +_FLOAT_FIELDS = {"cvssScore"} +_INT_FIELDS = {"resourcesInScopeCount", "resourcesTestedCount", "newFindingCount", "resolvedFindingCount"} + + +def _annotation_properties(om_type: str, qualified_name: str, attributes: Dict[str, Any]) -> Dict[str, Any]: + """The properties body for a security finding or posture annotation of type `om_type`.""" + props = set_element_prop_body(om_type, qualified_name, attributes) + for attr_name, key in _ANNOTATION_FIELDS.items(): + value = attributes.get(attr_name, {}).get("value") + if value is None or value == "" or value == []: + continue + try: + if key in _FLOAT_FIELDS: + value = float(value) + elif key in _INT_FIELDS: + value = int(value) + except (TypeError, ValueError): + raise ValueError(f"'{attr_name}' needs a number; got {value!r}") from None + if key == "findingCountsBySeverity" and isinstance(value, dict): + try: + value = {str(k): int(v) for k, v in value.items()} + except ValueError: + raise ValueError(f"'{attr_name}' needs a whole-number count per severity, one " + f"'severity: count' pair per line; got {value}") from None + props[key] = value + return props + + +class SurveyReportProcessor(AsyncBaseCommandProcessor): + """Processor for Create Survey Report (and its Update transition). + + A SurveyReport is an Asset, so it is created through Asset Maker; Report Subjects + are synced as ReportSubject relationships. + """ + + async def apply_changes(self) -> str: + attributes = self.parsed_output["attributes"] + qualified_name = self.parsed_output.get("qualified_name") or self.derive_qualified_name(attributes) + display_name = attributes.get("Display Name", {}).get("value") or qualified_name + merge_update = attributes.get("Merge Update", {}).get("value", True) + + props = set_element_prop_body("SurveyReport", qualified_name, attributes) + props["purpose"] = attributes.get("Purpose", {}).get("value") + props["startTime"] = attributes.get("Start Time", {}).get("value") + props["completionTime"] = attributes.get("Completion Time", {}).get("value") + + if self.as_is_element: + guid = self.as_is_element["elementHeader"]["guid"] + self.last_body = body = { + "class": "UpdateElementRequestBody", + "properties": self.filter_update_properties(props, merge_update), + "mergeUpdate": merge_update, + } + await self.client._async_update_asset(guid, body_slimmer(body)) + verb_word = "Updated" + else: + self.last_body = body = set_create_body("SurveyReport", attributes) + body["properties"] = props + raw_guid = await self.client._async_create_asset(["SurveyReportProperties"], body_slimmer(body)) + guid = self.extract_guid_or_raise(raw_guid, "Create Survey Report") + verb_word = "Created" + + self.parsed_output["guid"] = guid + if attributes.get("Report Subjects", {}).get("value"): + res = await self.sync_members( + _related_guids(self.as_is_element, "ReportSubject"), + set(attributes["Report Subjects"].get("guid_list") or []), + lambda g: self.client._async_link_report_subject(g, guid, _plain_rel_body(attributes)), + lambda g: self.client._async_unlink_report_subject( + g, guid, body_slimmer(set_delete_rel_request_body("ReportSubject", attributes))), + replace_all=not merge_update, + ) + _report_sync(self, "Report Subjects", res) + + update_element_dictionary(qualified_name, {"guid": guid, "display_name": display_name}) + logger.success(f"{verb_word} Survey Report '{display_name}' with GUID {guid}") + return await self.render_result_markdown(guid) + + +class SecurityFindingProcessor(AsyncBaseCommandProcessor): + """Processor for Create Security Finding / Vulnerability Finding / Penetration Test Finding + and Create Security Posture Summary (and their Update transitions). + + A new annotation is created under its Survey Report (ReportedAnnotation, anchored to the + report). Affected Elements, Previous Finding and Vulnerability Type are synced as + AssociatedAnnotation, AnnotationExtension and ReferenceValueAssignment relationships. + """ + + async def apply_changes(self) -> str: + attributes = self.parsed_output["attributes"] + qualified_name = self.parsed_output.get("qualified_name") or self.derive_qualified_name(attributes) + display_name = attributes.get("Display Name", {}).get("value") or qualified_name + merge_update = attributes.get("Merge Update", {}).get("value", True) + om_type = self.get_command_spec().get("OM_TYPE") + + props = _annotation_properties(om_type, qualified_name, attributes) + + if self.as_is_element: + guid = self.as_is_element["elementHeader"]["guid"] + if merge_update: + # Without this, the merge would reset any primitive the command leaves out. + current = self.as_is_element.get("properties") or {} + for key in _PRIMITIVE_FIELDS: + if key not in props and current.get(key) is not None: + props[key] = current[key] + self.last_body = body = { + "class": "UpdateElementRequestBody", + "properties": self.filter_update_properties(props, merge_update), + "mergeUpdate": merge_update, + } + await self.client._async_update_annotation(guid, body_slimmer(body)) + verb_word = "Updated" + else: + report_guid = attributes.get("Survey Report", {}).get("guid") + if not report_guid: + raise ValueError("Cannot create the finding: 'Survey Report' did not resolve to a survey report.") + body = set_create_body(om_type, attributes) + body.update({ + "anchorGUID": report_guid, + "isOwnAnchor": False, + "parentGUID": report_guid, + "parentRelationshipTypeName": "ReportedAnnotation", + "parentAtEnd1": True, + "properties": props, + }) + self.last_body = body = body_slimmer(body) + raw_guid = await self.client._async_create_annotation(body) + guid = self.extract_guid_or_raise(raw_guid, f"Create {self.command.object_type}") + verb_word = "Created" + + self.parsed_output["guid"] = guid + await self._sync_relationships(guid, attributes, replace_all=not merge_update) + update_element_dictionary(qualified_name, {"guid": guid, "display_name": display_name}) + logger.success(f"{verb_word} {self.command.object_type} '{display_name}' with GUID {guid}") + return await self.render_result_markdown(guid) + + async def _sync_relationships(self, guid: str, attributes: Dict[str, Any], replace_all: bool) -> None: + """Bring the finding's relationships in line with the command. + + As for statements of applicability, an attribute left out of the command + leaves its relationships alone, and only a replacing update removes links. + """ + as_is = self.as_is_element + delete_body = lambda rel: body_slimmer(set_delete_rel_request_body(rel, attributes)) + + if attributes.get("Affected Elements", {}).get("value"): + res = await self.sync_members( + _related_guids(as_is, "AssociatedAnnotation"), + set(attributes["Affected Elements"].get("guid_list") or []), + lambda g: self.client._async_link_annotation_to_described_element( + guid, g, _plain_rel_body(attributes)), + lambda g: self.client._async_detach_annotation_from_described_element( + guid, g, delete_body("AssociatedAnnotation")), + replace_all=replace_all, + ) + _report_sync(self, "Affected Elements", res) + + if attributes.get("Previous Finding", {}).get("value"): + previous = attributes["Previous Finding"].get("guid") + res = await self.sync_members( + _related_guids(as_is, "AnnotationExtension") - {guid}, + {previous} if previous else set(), + lambda g: self.client._async_link_annotation_to_its_predecessor( + guid, g, _plain_rel_body(attributes)), + lambda g: self.client._async_detach_annotation_from_its_predecessor( + guid, g, delete_body("AnnotationExtension")), + replace_all=replace_all, + ) + _report_sync(self, "Previous Finding", res) + + if attributes.get("Vulnerability Type", {}).get("value"): + vuln_type = attributes["Vulnerability Type"].get("guid") + res = await self.sync_members( + _related_guids(as_is, "ReferenceValueAssignment"), + {vuln_type} if vuln_type else set(), + lambda g: self.client._async_link_reference_value_assignment(guid, g, _plain_rel_body(attributes)), + lambda g: self.client._async_detach_reference_value_assignment( + guid, g, delete_body("ReferenceValueAssignment")), + replace_all=replace_all, + ) + _report_sync(self, "Vulnerability Type", res) diff --git a/pyegeria/view/base_report_formats.py b/pyegeria/view/base_report_formats.py index eb7d63e3..a559429b 100644 --- a/pyegeria/view/base_report_formats.py +++ b/pyegeria/view/base_report_formats.py @@ -267,6 +267,8 @@ 'Notification-Type-DrE-Basic': FormatSet(target_type='Notification Type', heading='Notification-Type-DrE-Basic Attributes', description='Auto-generated format for Notification Type (Create, Basic).', family='Governance Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description'), Column(name='Planned Completion Date', key='planned_completion_date'), Column(name='Multiple Notifications Permitted', key='multiple_notifications_permitted'), Column(name='Next Scheduled Notification', key='next_scheduled_notification'), Column(name='Notification Count', key='notification_count'), Column(name='Notification Interval', key='notification_interval'), Column(name='Minimum Notification Interval', key='minimum_notification_interval'), Column(name='Planned Start Date', key='planned_start_date'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description'), Column(name='Planned Completion Date', key='planned_completion_date'), Column(name='Multiple Notifications Permitted', key='multiple_notifications_permitted'), Column(name='Next Scheduled Notification', key='next_scheduled_notification'), Column(name='Notification Count', key='notification_count'), Column(name='Notification Interval', key='notification_interval'), Column(name='Minimum Notification Interval', key='minimum_notification_interval'), Column(name='Planned Start Date', key='planned_start_date')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'NotificationType'})), 'Organization-DrE-Advanced': FormatSet(target_type='Organization', heading='Organization-DrE-Advanced Attributes', description='Auto-generated format for Organization (Create, Advanced).', family='Actor Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Team Type', key='team_type'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Team Type', key='team_type'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='ActorManager.find_actor_profiles', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'Organization'})), 'Organization-DrE-Basic': FormatSet(target_type='Organization', heading='Organization-DrE-Basic Attributes', description='Auto-generated format for Organization (Create, Basic).', family='Actor Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Team Type', key='team_type'), Column(name='Version Identifier', key='version_identifier'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Team Type', key='team_type')])], action=ActionParameter(function='ActorManager.find_actor_profiles', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'Organization'})), + 'Penetration-Test-Finding-DrE-Advanced': FormatSet(target_type='Penetration Test Finding', heading='Penetration-Test-Finding-DrE-Advanced Attributes', description='Auto-generated format for Penetration Test Finding (Create, Advanced).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='CVSS Vector', key='cvss_vector'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Vulnerability Type', key='vulnerability_type'), Column(name='Attack Vector', key='attack_vector'), Column(name='Attack Techniques', key='attack_techniques'), Column(name='Privileges Gained', key='privileges_gained'), Column(name='Compromised Resources', key='compromised_resources'), Column(name='Reproduction Steps', key='reproduction_steps'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='CVSS Vector', key='cvss_vector'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Vulnerability Type', key='vulnerability_type'), Column(name='Attack Vector', key='attack_vector'), Column(name='Attack Techniques', key='attack_techniques'), Column(name='Privileges Gained', key='privileges_gained'), Column(name='Compromised Resources', key='compromised_resources'), Column(name='Reproduction Steps', key='reproduction_steps'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])]), + 'Penetration-Test-Finding-DrE-Basic': FormatSet(target_type='Penetration Test Finding', heading='Penetration-Test-Finding-DrE-Basic Attributes', description='Auto-generated format for Penetration Test Finding (Create, Basic).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Attack Vector', key='attack_vector'), Column(name='Attack Techniques', key='attack_techniques'), Column(name='Privileges Gained', key='privileges_gained'), Column(name='Compromised Resources', key='compromised_resources'), Column(name='Reproduction Steps', key='reproduction_steps'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Attack Vector', key='attack_vector'), Column(name='Attack Techniques', key='attack_techniques'), Column(name='Privileges Gained', key='privileges_gained'), Column(name='Compromised Resources', key='compromised_resources'), Column(name='Reproduction Steps', key='reproduction_steps')])]), 'Person-DrE-Advanced': FormatSet(target_type='Person', heading='Person-DrE-Advanced Attributes', description='Auto-generated format for Person (Create, Advanced).', family='Actor Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Courtesy Title', key='courtesy_title'), Column(name='Employee Number', key='employee_number'), Column(name='Employee Type', key='employee_type'), Column(name='Full Name', key='full_name'), Column(name='Given Names', key='given_names'), Column(name='Initials', key='initials'), Column(name='Job Title', key='job_title'), Column(name='Preferred Language', key='preferred_language'), Column(name='Pronouns', key='pronouns'), Column(name='Resident Country', key='resident_country'), Column(name='Surname', key='surname'), Column(name='Time Zone', key='time_zone'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Courtesy Title', key='courtesy_title'), Column(name='Employee Number', key='employee_number'), Column(name='Employee Type', key='employee_type'), Column(name='Full Name', key='full_name'), Column(name='Given Names', key='given_names'), Column(name='Initials', key='initials'), Column(name='Job Title', key='job_title'), Column(name='Preferred Language', key='preferred_language'), Column(name='Pronouns', key='pronouns'), Column(name='Resident Country', key='resident_country'), Column(name='Surname', key='surname'), Column(name='Time Zone', key='time_zone'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='ActorManager.find_actor_profiles', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'Person'})), 'Person-DrE-Basic': FormatSet(target_type='Person', heading='Person-DrE-Basic Attributes', description='Auto-generated format for Person (Create, Basic).', family='Actor Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Courtesy Title', key='courtesy_title'), Column(name='Employee Number', key='employee_number'), Column(name='Employee Type', key='employee_type'), Column(name='Full Name', key='full_name'), Column(name='Given Names', key='given_names'), Column(name='Initials', key='initials'), Column(name='Job Title', key='job_title'), Column(name='Preferred Language', key='preferred_language'), Column(name='Pronouns', key='pronouns'), Column(name='Resident Country', key='resident_country'), Column(name='Surname', key='surname'), Column(name='Time Zone', key='time_zone'), Column(name='Version Identifier', key='version_identifier'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Courtesy Title', key='courtesy_title'), Column(name='Employee Number', key='employee_number'), Column(name='Employee Type', key='employee_type'), Column(name='Full Name', key='full_name'), Column(name='Given Names', key='given_names'), Column(name='Initials', key='initials'), Column(name='Job Title', key='job_title'), Column(name='Preferred Language', key='preferred_language'), Column(name='Pronouns', key='pronouns'), Column(name='Resident Country', key='resident_country'), Column(name='Surname', key='surname'), Column(name='Time Zone', key='time_zone')])], action=ActionParameter(function='ActorManager.find_actor_profiles', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'Person'})), 'Person-Role-DrE-Advanced': FormatSet(target_type='Person Role', heading='Person-Role-DrE-Advanced Attributes', description='Auto-generated format for Person Role (Create, Advanced).', family='Actor Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Scope', key='scope'), Column(name='Headcount', key='head_count'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Scope', key='scope'), Column(name='Headcount', key='head_count'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='ActorManager.find_actor_roles', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'PersonRole'})), @@ -327,10 +329,14 @@ 'Secrets-Store-Element-DrE-Basic': FormatSet(target_type='Secrets Store Element', heading='Secrets-Store-Element-DrE-Basic Attributes', description='Auto-generated format for Secrets Store Element (Create, Basic).', family='Asset Maker', formats=[Format(types=['LIST'], attributes=[Column(name='File Path Name', key='file_path_name'), Column(name='File Name', key='file_name'), Column(name='Description', key='description'), Column(name='File System Name', key='file_system_name'), Column(name='File Type', key='file_type'), Column(name='File Extension', key='file_extension'), Column(name='File Encoding', key='file_encoding'), Column(name='Version Identifier', key='version_identifier')]), Format(types=['ALL'], attributes=[Column(name='File Path Name', key='file_path_name'), Column(name='File Name', key='file_name'), Column(name='Description', key='description'), Column(name='Version Identifier', key='version_identifier'), Column(name='File System Name', key='file_system_name'), Column(name='File Type', key='file_type'), Column(name='File Extension', key='file_extension'), Column(name='File Encoding', key='file_encoding')])], action=ActionParameter(function='MetadataExpert.find_metadata_elements_with_string', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'])), 'Security-Access-Control-DrE-Advanced': FormatSet(target_type='Security Access Control', heading='Security-Access-Control-DrE-Advanced Attributes', description='Auto-generated format for Security Access Control (Create, Advanced).', family='Governance Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityAccessControl'})), 'Security-Access-Control-DrE-Basic': FormatSet(target_type='Security Access Control', heading='Security-Access-Control-DrE-Basic Attributes', description='Auto-generated format for Security Access Control (Create, Basic).', family='Governance Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityAccessControl'})), + 'Security-Finding-DrE-Advanced': FormatSet(target_type='Security Finding', heading='Security-Finding-DrE-Advanced Attributes', description='Auto-generated format for Security Finding (Create, Advanced).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='CVSS Vector', key='cvss_vector'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Vulnerability Type', key='vulnerability_type'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='CVSS Vector', key='cvss_vector'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Vulnerability Type', key='vulnerability_type'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])]), + 'Security-Finding-DrE-Basic': FormatSet(target_type='Security Finding', heading='Security-Finding-DrE-Basic Attributes', description='Auto-generated format for Security Finding (Create, Basic).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding')])]), 'Security-Group-DrE-Advanced': FormatSet(target_type='Security Group', heading='Security-Group-DrE-Advanced Attributes', description='Auto-generated format for Security Group (Create, Advanced).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityGroup'})), 'Security-Group-DrE-Basic': FormatSet(target_type='Security Group', heading='Security-Group-DrE-Basic Attributes', description='Auto-generated format for Security Group (Create, Basic).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityGroup'})), 'Security-List-DrE-Advanced': FormatSet(target_type='Security List', heading='Security-List-DrE-Advanced Attributes', description='Auto-generated format for Security List (Create, Advanced).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityList'})), 'Security-List-DrE-Basic': FormatSet(target_type='Security List', heading='Security-List-DrE-Basic Attributes', description='Auto-generated format for Security List (Create, Basic).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityList'})), + 'Security-Posture-Summary-DrE-Advanced': FormatSet(target_type='Security Posture Summary', heading='Security-Posture-Summary-DrE-Advanced Attributes', description='Auto-generated format for Security Posture Summary (Create, Advanced).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Finding Counts By Severity', key='finding_counts_by_severity'), Column(name='Resources In Scope Count', key='resources_in_scope_count'), Column(name='Resources Tested Count', key='resources_tested_count'), Column(name='New Finding Count', key='new_finding_count'), Column(name='Resolved Finding Count', key='resolved_finding_count'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Finding Counts By Severity', key='finding_counts_by_severity'), Column(name='Resources In Scope Count', key='resources_in_scope_count'), Column(name='Resources Tested Count', key='resources_tested_count'), Column(name='New Finding Count', key='new_finding_count'), Column(name='Resolved Finding Count', key='resolved_finding_count'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])]), + 'Security-Posture-Summary-DrE-Basic': FormatSet(target_type='Security Posture Summary', heading='Security-Posture-Summary-DrE-Basic Attributes', description='Auto-generated format for Security Posture Summary (Create, Basic).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Finding Counts By Severity', key='finding_counts_by_severity'), Column(name='Resources In Scope Count', key='resources_in_scope_count'), Column(name='Resources Tested Count', key='resources_tested_count'), Column(name='New Finding Count', key='new_finding_count'), Column(name='Resolved Finding Count', key='resolved_finding_count'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Finding Counts By Severity', key='finding_counts_by_severity'), Column(name='Resources In Scope Count', key='resources_in_scope_count'), Column(name='Resources Tested Count', key='resources_tested_count'), Column(name='New Finding Count', key='new_finding_count'), Column(name='Resolved Finding Count', key='resolved_finding_count')])]), 'Security-Role-DrE-Advanced': FormatSet(target_type='Security Role', heading='Security-Role-DrE-Advanced Attributes', description='Auto-generated format for Security Role (Create, Advanced).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityRole'})), 'Security-Role-DrE-Basic': FormatSet(target_type='Security Role', heading='Security-Role-DrE-Basic Attributes', description='Auto-generated format for Security Role (Create, Basic).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Purpose', key='purpose'), Column(name='Distinguished Name', key='distinguished_name')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SecurityRole'})), 'Service-Level-Objective-DrE-Advanced': FormatSet(target_type='Service Level Objective', heading='Service-Level-Objective-DrE-Advanced Attributes', description='Auto-generated format for Service Level Objective (Create, Advanced).', family='Governance Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Domain Identifier', key='domain_identifier', valid_values=['All Domains', 'Data', 'Privacy', 'Security', 'IT Infrastructure', 'Software Development', 'Corporate', 'Asset Management', 'Other']), Column(name='Implications', key='implications'), Column(name='Importance', key='importance'), Column(name='Outcomes', key='outcomes'), Column(name='Results', key='results'), Column(name='Scope', key='scope'), Column(name='Summary', key='summary'), Column(name='Usage', key='usage'), Column(name='Implementation Description', key='implementation_description')])], action=ActionParameter(function='GovernanceOfficer.find_governance_definitions', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'ServiceLevelObjective'})), @@ -355,6 +361,8 @@ 'Subject-Area-DrE-Basic': FormatSet(target_type='Subject Area', heading='Subject-Area-DrE-Basic Attributes', description='Auto-generated format for Subject Area (Create, Basic).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Purpose', key='purpose')])], action=ActionParameter(function='CollectionManager.find_collections', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SubjectArea'})), 'Subscription-Type-DrE-Advanced': FormatSet(target_type='Subscription Type', heading='Subscription-Type-DrE-Advanced Attributes', description='Auto-generated format for Subscription Type (Create, Advanced).', family='Digital Product Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Digital Product', key='digital_product'), Column(name='Subscription Kind', key='subscription_kind', valid_values=['ONE_TIME', 'PERIODIC', 'ONGOING_UPDATE']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Subscription Notification Interval', key='subscription_notification_interval'), Column(name='Monitored Resources', key='monitored_resources'), Column(name='Subscription Manager', key='subscription_manager'), Column(name='Subscription License Type', key='subscription_license_type'), Column(name='Subscription Service Level Objective', key='subscription_service_level_objective')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Digital Product', key='digital_product'), Column(name='Subscription Kind', key='subscription_kind', valid_values=['ONE_TIME', 'PERIODIC', 'ONGOING_UPDATE']), Column(name='Display Name', key='display_name'), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Subscription Notification Interval', key='subscription_notification_interval'), Column(name='Monitored Resources', key='monitored_resources'), Column(name='Subscription Manager', key='subscription_manager'), Column(name='Subscription License Type', key='subscription_license_type'), Column(name='Subscription Service Level Objective', key='subscription_service_level_objective')])]), 'Subscription-Type-DrE-Basic': FormatSet(target_type='Subscription Type', heading='Subscription-Type-DrE-Basic Attributes', description='Auto-generated format for Subscription Type (Create, Basic).', family='Digital Product Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Digital Product', key='digital_product'), Column(name='Subscription Kind', key='subscription_kind', valid_values=['ONE_TIME', 'PERIODIC', 'ONGOING_UPDATE']), Column(name='Description', key='description'), Column(name='Subscription Notification Interval', key='subscription_notification_interval'), Column(name='Monitored Resources', key='monitored_resources')]), Format(types=['ALL'], attributes=[Column(name='Digital Product', key='digital_product'), Column(name='Subscription Kind', key='subscription_kind', valid_values=['ONE_TIME', 'PERIODIC', 'ONGOING_UPDATE']), Column(name='Display Name', key='display_name'), Column(name='Description', key='description'), Column(name='Subscription Notification Interval', key='subscription_notification_interval'), Column(name='Monitored Resources', key='monitored_resources')])]), + 'Survey-Report-DrE-Advanced': FormatSet(target_type='Survey Report', heading='Survey-Report-DrE-Advanced Attributes', description='Auto-generated format for Survey Report (Create, Advanced).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Purpose', key='purpose'), Column(name='Start Time', key='start_time'), Column(name='Completion Time', key='completion_time'), Column(name='Report Subjects', key='report_subjects'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Purpose', key='purpose'), Column(name='Start Time', key='start_time'), Column(name='Completion Time', key='completion_time'), Column(name='Report Subjects', key='report_subjects'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='AssetMaker.find_assets', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SurveyReport'})), + 'Survey-Report-DrE-Basic': FormatSet(target_type='Survey Report', heading='Survey-Report-DrE-Basic Attributes', description='Auto-generated format for Survey Report (Create, Basic).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Purpose', key='purpose'), Column(name='Start Time', key='start_time'), Column(name='Completion Time', key='completion_time'), Column(name='Report Subjects', key='report_subjects'), Column(name='Version Identifier', key='version_identifier'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Purpose', key='purpose'), Column(name='Start Time', key='start_time'), Column(name='Completion Time', key='completion_time'), Column(name='Report Subjects', key='report_subjects')])], action=ActionParameter(function='AssetMaker.find_assets', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'SurveyReport'})), 'Task-DrE-Advanced': FormatSet(target_type='Task', heading='Task-DrE-Advanced Attributes', description='Auto-generated format for Task (Create, Advanced).', family='Projects', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Actual Completion Date', key='actual_completion_date'), Column(name='Actual Start Date', key='actual_start_date'), Column(name='Mission', key='mission'), Column(name='Planned Completion Date', key='planned_completion_date'), Column(name='Planned Start Date', key='planned_start_date'), Column(name='Priority', key='priority'), Column(name='Project Approach', key='approach'), Column(name='Project Health', key='project_health'), Column(name='Project Identifier', key='project_identifier'), Column(name='Project Management Style', key='management_style'), Column(name='Project Phase', key='project_phase'), Column(name='Project Results Usage', key='results_usage'), Column(name='Project Scope', key='project_scope'), Column(name='Project Type', key='project_type', valid_values=['Project', 'Campaign', 'Task', 'PersonalProject', 'StudyProject', 'Experiment']), Column(name='Purposes', key='purposes'), Column(name='Sub-Projects', key='sub_projects'), Column(name='Success Criteria', key='success_criteria'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Project Status', key='project_status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Actual Completion Date', key='actual_completion_date'), Column(name='Actual Start Date', key='actual_start_date'), Column(name='Mission', key='mission'), Column(name='Planned Completion Date', key='planned_completion_date'), Column(name='Planned Start Date', key='planned_start_date'), Column(name='Priority', key='priority'), Column(name='Project Approach', key='approach'), Column(name='Project Health', key='project_health'), Column(name='Project Identifier', key='project_identifier'), Column(name='Project Management Style', key='management_style'), Column(name='Project Phase', key='project_phase'), Column(name='Project Results Usage', key='results_usage'), Column(name='Project Scope', key='project_scope'), Column(name='Project Status', key='project_status'), Column(name='Project Type', key='project_type', valid_values=['Project', 'Campaign', 'Task', 'PersonalProject', 'StudyProject', 'Experiment']), Column(name='Purposes', key='purposes'), Column(name='Sub-Projects', key='sub_projects'), Column(name='Success Criteria', key='success_criteria'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='ProjectManager.find_projects', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'include_only_classified_elements': ['Task']})), 'Task-DrE-Basic': FormatSet(target_type='Task', heading='Task-DrE-Basic Attributes', description='Auto-generated format for Task (Create, Basic).', family='Projects', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Actual Completion Date', key='actual_completion_date'), Column(name='Actual Start Date', key='actual_start_date'), Column(name='Mission', key='mission'), Column(name='Planned Completion Date', key='planned_completion_date'), Column(name='Planned Start Date', key='planned_start_date'), Column(name='Priority', key='priority'), Column(name='Project Approach', key='approach'), Column(name='Project Health', key='project_health'), Column(name='Project Identifier', key='project_identifier'), Column(name='Project Management Style', key='management_style'), Column(name='Project Phase', key='project_phase'), Column(name='Project Results Usage', key='results_usage'), Column(name='Project Scope', key='project_scope'), Column(name='Project Type', key='project_type', valid_values=['Project', 'Campaign', 'Task', 'PersonalProject', 'StudyProject', 'Experiment']), Column(name='Purposes', key='purposes'), Column(name='Sub-Projects', key='sub_projects'), Column(name='Success Criteria', key='success_criteria'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Project Status', key='project_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Actual Completion Date', key='actual_completion_date'), Column(name='Actual Start Date', key='actual_start_date'), Column(name='Mission', key='mission'), Column(name='Planned Completion Date', key='planned_completion_date'), Column(name='Planned Start Date', key='planned_start_date'), Column(name='Priority', key='priority'), Column(name='Project Approach', key='approach'), Column(name='Project Health', key='project_health'), Column(name='Project Identifier', key='project_identifier'), Column(name='Project Management Style', key='management_style'), Column(name='Project Phase', key='project_phase'), Column(name='Project Results Usage', key='results_usage'), Column(name='Project Scope', key='project_scope'), Column(name='Project Status', key='project_status'), Column(name='Project Type', key='project_type', valid_values=['Project', 'Campaign', 'Task', 'PersonalProject', 'StudyProject', 'Experiment']), Column(name='Purposes', key='purposes'), Column(name='Sub-Projects', key='sub_projects'), Column(name='Success Criteria', key='success_criteria')])], action=ActionParameter(function='ProjectManager.find_projects', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'include_only_classified_elements': ['Task']})), 'Team-DrE-Advanced': FormatSet(target_type='Team', heading='Team-DrE-Advanced Attributes', description='Auto-generated format for Team (Create, Advanced).', family='Actor Manager', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Team Type', key='team_type'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Team Type', key='team_type'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='ActorManager.find_actor_profiles', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'Team'})), @@ -379,6 +387,8 @@ 'UC-Table-Element-DrE-Basic': FormatSet(target_type='UC Table Element', heading='UC-Table-Element-DrE-Basic Attributes', description='Auto-generated format for UC Table Element (Create, Basic).', family='Asset Maker', formats=[Format(types=['LIST'], attributes=[Column(name='UC Catalog Name', key='uc_catalog'), Column(name='UC Schema Name', key='uc_schema'), Column(name='UC Table Name', key='uc_table'), Column(name='UC Table Type', key='uc_table_type', valid_values=['Managed', 'External']), Column(name='UC Storage Location', key='uc_storage_loc'), Column(name='UC Data Source Format', key='uc_data_source_format', valid_values=['DELTA', 'CSV', 'JSON', 'AVRO', 'PARQUET', 'ORC', 'TEXT']), Column(name='Network Address', key='network_address'), Column(name='Description', key='description'), Column(name='Version Identifier', key='version_identifier')]), Format(types=['ALL'], attributes=[Column(name='UC Catalog Name', key='uc_catalog'), Column(name='UC Schema Name', key='uc_schema'), Column(name='UC Table Name', key='uc_table'), Column(name='UC Table Type', key='uc_table_type', valid_values=['Managed', 'External']), Column(name='UC Storage Location', key='uc_storage_loc'), Column(name='UC Data Source Format', key='uc_data_source_format', valid_values=['DELTA', 'CSV', 'JSON', 'AVRO', 'PARQUET', 'ORC', 'TEXT']), Column(name='Network Address', key='network_address'), Column(name='Description', key='description'), Column(name='Version Identifier', key='version_identifier')])], action=ActionParameter(function='MetadataExpert.find_metadata_elements_with_string', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'])), 'UC-Volume-Element-DrE-Advanced': FormatSet(target_type='UC Volume Element', heading='UC-Volume-Element-DrE-Advanced Attributes', description='Auto-generated format for UC Volume Element (Create, Advanced).', family='Asset Maker', formats=[Format(types=['LIST'], attributes=[Column(name='UC Catalog Name', key='uc_catalog'), Column(name='UC Schema Name', key='uc_schema'), Column(name='UC Volume Name', key='uc_volume'), Column(name='UC Volume Type', key='uc_vol_type', valid_values=['Managed', 'External']), Column(name='UC Storage Location', key='uc_storage_loc'), Column(name='Network Address', key='network_address'), Column(name='Description', key='description'), Column(name='Version Identifier', key='version_identifier')]), Format(types=['ALL'], attributes=[Column(name='UC Catalog Name', key='uc_catalog'), Column(name='UC Schema Name', key='uc_schema'), Column(name='UC Volume Name', key='uc_volume'), Column(name='UC Volume Type', key='uc_vol_type', valid_values=['Managed', 'External']), Column(name='UC Storage Location', key='uc_storage_loc'), Column(name='Network Address', key='network_address'), Column(name='Description', key='description'), Column(name='Version Identifier', key='version_identifier')])], action=ActionParameter(function='MetadataExpert.find_metadata_elements_with_string', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'])), 'UC-Volume-Element-DrE-Basic': FormatSet(target_type='UC Volume Element', heading='UC-Volume-Element-DrE-Basic Attributes', description='Auto-generated format for UC Volume Element (Create, Basic).', family='Asset Maker', formats=[Format(types=['LIST'], attributes=[Column(name='UC Catalog Name', key='uc_catalog'), Column(name='UC Schema Name', key='uc_schema'), Column(name='UC Volume Name', key='uc_volume'), Column(name='UC Volume Type', key='uc_vol_type', valid_values=['Managed', 'External']), Column(name='UC Storage Location', key='uc_storage_loc'), Column(name='Network Address', key='network_address'), Column(name='Description', key='description'), Column(name='Version Identifier', key='version_identifier')]), Format(types=['ALL'], attributes=[Column(name='UC Catalog Name', key='uc_catalog'), Column(name='UC Schema Name', key='uc_schema'), Column(name='UC Volume Name', key='uc_volume'), Column(name='UC Volume Type', key='uc_vol_type', valid_values=['Managed', 'External']), Column(name='UC Storage Location', key='uc_storage_loc'), Column(name='Network Address', key='network_address'), Column(name='Description', key='description'), Column(name='Version Identifier', key='version_identifier')])], action=ActionParameter(function='MetadataExpert.find_metadata_elements_with_string', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'])), + 'Vulnerability-Finding-DrE-Advanced': FormatSet(target_type='Vulnerability Finding', heading='Vulnerability-Finding-DrE-Advanced Attributes', description='Auto-generated format for Vulnerability Finding (Create, Advanced).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='CVSS Vector', key='cvss_vector'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Vulnerability Type', key='vulnerability_type'), Column(name='Package URL', key='package_url'), Column(name='Installed Version', key='installed_version'), Column(name='Fixed Version', key='fixed_version'), Column(name='Patch Available', key='patch_available'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='CVSS Vector', key='cvss_vector'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Vulnerability Type', key='vulnerability_type'), Column(name='Package URL', key='package_url'), Column(name='Installed Version', key='installed_version'), Column(name='Fixed Version', key='fixed_version'), Column(name='Patch Available', key='patch_available'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])]), + 'Vulnerability-Finding-DrE-Basic': FormatSet(target_type='Vulnerability Finding', heading='Vulnerability-Finding-DrE-Basic Attributes', description='Auto-generated format for Vulnerability Finding (Create, Basic).', family='Security Officer', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Package URL', key='package_url'), Column(name='Installed Version', key='installed_version'), Column(name='Fixed Version', key='fixed_version'), Column(name='Patch Available', key='patch_available'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Survey Report', key='survey_report'), Column(name='Summary', key='summary'), Column(name='Severity', key='severity', valid_values=['None', 'Low', 'Medium', 'High', 'Critical']), Column(name='CVSS Score', key='cvss_score'), Column(name='Vulnerability Identifiers', key='vulnerability_identifiers'), Column(name='Weakness Identifiers', key='weakness_identifiers'), Column(name='Affected Location', key='affected_location'), Column(name='Evidence', key='evidence'), Column(name='Remediation', key='remediation'), Column(name='Exploit Available', key='exploit_available'), Column(name='Affected Elements', key='affected_elements'), Column(name='Previous Finding', key='previous_finding'), Column(name='Package URL', key='package_url'), Column(name='Installed Version', key='installed_version'), Column(name='Fixed Version', key='fixed_version'), Column(name='Patch Available', key='patch_available')])]), 'Work-Item-List-DrE-Advanced': FormatSet(target_type='Work Item List', heading='Work-Item-List-DrE-Advanced Attributes', description='Auto-generated format for Work Item List (Create, Advanced).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Purpose', key='purpose'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='CollectionManager.find_collections', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'WorkItemList'})), 'Work-Item-List-DrE-Basic': FormatSet(target_type='Work Item List', heading='Work-Item-List-DrE-Basic Attributes', description='Auto-generated format for Work Item List (Create, Basic).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Description', key='description'), Column(name='Legal', key='legal'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Version Identifier', key='version_identifier'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Category', key='category'), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Legal', key='legal'), Column(name='Qualified Name', key='qualified_name'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='Purpose', key='purpose')])], action=ActionParameter(function='CollectionManager.find_collections', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'WorkItemList'})), 'Working-Set-DrE-Advanced': FormatSet(target_type='Working Set', heading='Working-Set-DrE-Advanced Attributes', description='Auto-generated format for Working Set (Create, Advanced).', family='Collections', formats=[Format(types=['LIST'], attributes=[Column(name='Display Name', key='display_name'), Column(name='Qualified Name', key='qualified_name'), Column(name='GUID', key='guid'), Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='Authors', key='authors'), Column(name='Purpose', key='purpose'), Column(name='Disposition', key='disposition'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties'), Column(name='Version Identifier', key='version_identifier'), Column(name='Status', key='status'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Category', key='category')]), Format(types=['ALL'], attributes=[Column(name='Effective From', key='effective_from'), Column(name='Effective Time', key='effective_time'), Column(name='Effective To', key='effective_to'), Column(name='Glossary Term', key='glossary_term'), Column(name='Is Own Anchor', key='is_own_anchor'), Column(name='Status', key='status'), Column(name='Zone Membership', key='zone_membership'), Column(name='Additional Properties', key='additional_properties'), Column(name='Category', key='category'), Column(name='Confidence Classification', key='confidence_classification', valid_values=['UNCLASSIFIED', 'AD_HOC', 'TRANSACTIONAL', 'AUTHORITATIVE', 'DERIVED', 'OBSOLETE', 'OTHER']), Column(name='Confidentiality Classification', key='confidentiality_classification', valid_values=['UNCLASSIFIED', 'INTERNAL', 'CONFIDENTIAL', 'SENSITIVE', 'RESTRICTED', 'OTHER']), Column(name='Criticality Classification', key='criticality_classification', valid_values=['UNCLASSIFIED', 'MARGINAL', 'IMPORTANT', 'CRITICAL', 'CATASTROPHIC', 'OTHER']), Column(name='Description', key='description'), Column(name='Display Name', key='display_name'), Column(name='GUID', key='guid'), Column(name='Identifier', key='identifier'), Column(name='Impact Classification', key='impact_classification', valid_values=['UNCLASSIFIED', 'LOW', 'MEDIUM', 'HIGH', 'OTHER']), Column(name='Legal', key='legal'), Column(name='Policy Management Point', key='policy_management_point'), Column(name='Qualified Name', key='qualified_name'), Column(name='Retention Classification', key='retention_classification', valid_values=['UNCLASSIFIED', 'TEMPORARY', 'PROJECT_LIFETIME', 'TEAM_LIFETIME', 'CONTRACT_LIFETIME', 'REGULATED_LIFETIME', 'TIMEBOXED_LIFETIME', 'OTHER']), Column(name='Security Tags', key='security_tags'), Column(name='URL', key='url'), Column(name='Version Identifier', key='version_identifier'), Column(name='Authors', key='authors'), Column(name='Content Status', key='content_status', valid_values=['DRAFT', 'PREPARED', 'PROPOSED', 'APPROVED', 'REJECTED', 'ACTIVE', 'DEPRECATED', 'OTHER']), Column(name='User Defined Content Status', key='user_defined_content_status'), Column(name='Purpose', key='purpose'), Column(name='Disposition', key='disposition'), Column(name='User Defined Status', key='user_defined_status'), Column(name='Classifications', key='classifications'), Column(name='Anchor Scope Name', key='anchor_scope_guid'), Column(name='Supplementary Properties', key='supplementary_properties')])], action=ActionParameter(function='CollectionManager.find_collections', required_params=['search_string'], optional_params=['sequencing_order', 'sequencing_property', 'page_size', 'start_from', 'starts_with', 'ends_with', 'ignore_case', 'classification_names', 'metadata_element_subtypes', 'metadata_element_type'], spec_params={'metadata_element_type': 'WorkingSet'})), diff --git a/sample-data/templates/advanced/Curation/Classify_Promise.md b/sample-data/templates/advanced/Curation/Classify_Promise.md index cea40e25..0ba9d33d 100644 --- a/sample-data/templates/advanced/Curation/Classify_Promise.md +++ b/sample-data/templates/advanced/Curation/Classify_Promise.md @@ -24,7 +24,7 @@ ___ > **Attribute Type**: Simple -> **Description**: Date/time (ISO 8601) that work started on delivering the promised resource. +> **Description**: Date/time (ISO 8601) that the work started - for a promise, work on delivering the promised resource; for a report, the run that produced it. ### Due Time @@ -48,7 +48,7 @@ ___ > **Attribute Type**: Simple -> **Description**: Date/time (ISO 8601) that the promised resource was delivered. +> **Description**: Date/time (ISO 8601) that the work finished - for a promise, when the promised resource was delivered; for a report, when the run completed. ### Journal Entry diff --git a/sample-data/templates/advanced/Security Officer/Create_Penetration_Test_Finding.md b/sample-data/templates/advanced/Security Officer/Create_Penetration_Test_Finding.md new file mode 100644 index 00000000..94bbeab5 --- /dev/null +++ b/sample-data/templates/advanced/Security Officer/Create_Penetration_Test_Finding.md @@ -0,0 +1,586 @@ +___ + +## Create Penetration Test Finding +> A weakness a penetration test was able to exploit. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Severity +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The CVSS severity rating of the finding. + +> **Valid Values**: None,Low,Medium,High,Critical + + +### CVSS Score +> **Input Required**: False + +> **Attribute Type**: Simple Float + +> **Description**: CVSS base score, 0.0 to 10.0. + + +### Vulnerability Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the vulnerability, such as CVE identifiers. + + +### Weakness Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the weakness, such as CWE identifiers. + + +### Affected Location +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Where the finding is: host and port, URL, file path or package. + + +### Evidence +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: What demonstrated the finding, such as the request and response. + + +### Remediation +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The recommended fix. + + +### Exploit Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether an exploit is publicly available. + + +### Affected Elements +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: Catalogued elements the finding affects - the tested asset, and any catalogued element at the affected location or among the compromised resources. Each is linked with an AssociatedAnnotation relationship. + + +### Previous Finding +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: The same finding in an earlier run. Linked with an AnnotationExtension relationship. + + +### Attack Vector +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: How the weakness was reached, such as Network, Adjacent network, Local, Physical or Social engineering. + + +### Attack Techniques +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Techniques used, such as MITRE ATT&CK technique identifiers. + + +### Privileges Gained +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The privileges the tester gained. + + +### Compromised Resources +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Names of the resources reached or controlled. + + +### Reproduction Steps +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: How to reproduce the finding. + + +### Effective From +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The beginning of when an element is viewable. + + +### Effective Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The time at which an element must be effective in order to be returned by the request. + + +### Effective To +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The ending time at which an element is visible. + + +### External Source GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: The unique identifier of an external source. + + +### External Source Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The name of an external source + + +### For Duplicate Processing +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support duplicate processing. + + +### For Lineage +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support lineage. + + +### Request ID +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user provided or system generated request id for a conversation. + + +### Anchor ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the anchoring element. + + +### Anchor Scope ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Anchor scope to restrict search. + +> **Alternative Labels**: Anchor Scope + + +### Glossary Term +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Term that provides meaning to this field. + +> **Alternative Labels**: Term + + +### Is Own Anchor +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the element is its own anchor or is anchored to a different element. + +> **Alternative Labels**: Own Anchor + +> **Default Value**: true + + +### Merge Update +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the update should be a merge or replace. + +> **Alternative Labels**: isMergeUpdate + +> **Default Value**: true + + +### Parent at End1 +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the parent is at end1 of the relationship + +> **Default Value**: true + + +### Parent ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the parent + +> **Alternative Labels**: Parent; + + +### Parent Relationship Attributes +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: A dictionary of relationship attributes to establish the parent relationship. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Parent Relationship Type Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The type of parent relationship. + + +### Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Repository or element header status for an element. + +> **Default Value**: ACTIVE + + +### Zone Membership +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Zones scope visibility of elements to different users. + + +### Additional Properties +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Additional Properties allow arbitrary properties not defined in the type definitions to be added to any referenceable element. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Confidence Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidenceLevel enum: UNCLASSIFIED=0, AD_HOC=1, TRANSACTIONAL=2, AUTHORITATIVE=3, DERIVED=4, OBSOLETE=5, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,AD_HOC,TRANSACTIONAL,AUTHORITATIVE,DERIVED,OBSOLETE,OTHER + + +### Confidentiality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidentialityLevel enum: UNCLASSIFIED=0, INTERNAL=1, CONFIDENTIAL=2, SENSITIVE=3, RESTRICTED=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,INTERNAL,CONFIDENTIAL,SENSITIVE,RESTRICTED,OTHER + + +### Criticality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses CriticalityLevel enum: UNCLASSIFIED=0, MARGINAL=1, IMPORTANT=2, CRITICAL=3, CATASTROPHIC=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,MARGINAL,IMPORTANT,CRITICAL,CATASTROPHIC,OTHER + + +### Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: An identier + +> **Alternative Labels**: ID + + +### Impact Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, severity_identifier: int}. severity_identifier uses ImpactSeverity enum: UNCLASSIFIED=0, LOW=1, MEDIUM=2, HIGH=3, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,LOW,MEDIUM,HIGH,OTHER + + +### Policy Management Point +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Combined classification from 0435. Applied to Referenceable. Structure: {point_type: str, name: str, description: str}. point_type is one of: PolicyAdministrationPoint, PolicyDecisionPoint, PolicyEnforcementPoint, PolicyInformationPoint, PolicyRetrievalPoint. A Referenceable may have multiple policy management point classifications simultaneously. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Retention Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, basis_identifier: int, associated_guid: str, archive_after: date, delete_after: date}. basis_identifier uses RetentionBasis enum: UNCLASSIFIED=0, TEMPORARY=1, PROJECT_LIFETIME=2, TEAM_LIFETIME=3, CONTRACT_LIFETIME=4, REGULATED_LIFETIME=5, TIMEBOXED_LIFETIME=6, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,TEMPORARY,PROJECT_LIFETIME,TEAM_LIFETIME,CONTRACT_LIFETIME,REGULATED_LIFETIME,TIMEBOXED_LIFETIME,OTHER + + +### Security Tags +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Optional security tags for security processing. + + +### User Defined Content Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user defined content status = only valid if content status is OTHER. + + +### CVSS Vector +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The CVSS vector string. + + +### Vulnerability Type +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: A reference data value naming the type of vulnerability. Linked with a ReferenceValueAssignment relationship. + + +### User Defined Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Only valid if Status is set to OTHER. User defined & managed status values. + + +### Classifications +> **Input Required**: false + +> **Attribute Type**: Named DICT + +> **Description**: Optionally specify the initial classifications for a collection. Multiple classifications can be specified. + +> **Alternative Labels**: classification + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Anchor Scope Name +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Optional qualified name of an anchor scope. + + +### Supplementary Properties +> **Input Required**: False + +> **Attribute Type**: Named DICT + +> **Description**: Provide supplementary information to the element using the structure of a glossary term + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +___ diff --git a/sample-data/templates/advanced/Security Officer/Create_Security_Finding.md b/sample-data/templates/advanced/Security Officer/Create_Security_Finding.md new file mode 100644 index 00000000..0df254fe --- /dev/null +++ b/sample-data/templates/advanced/Security Officer/Create_Security_Finding.md @@ -0,0 +1,546 @@ +___ + +## Create Security Finding +> A security finding from a test run that is neither a known vulnerability nor a penetration test finding, such as an insecure configuration. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Severity +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The CVSS severity rating of the finding. + +> **Valid Values**: None,Low,Medium,High,Critical + + +### CVSS Score +> **Input Required**: False + +> **Attribute Type**: Simple Float + +> **Description**: CVSS base score, 0.0 to 10.0. + + +### Vulnerability Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the vulnerability, such as CVE identifiers. + + +### Weakness Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the weakness, such as CWE identifiers. + + +### Affected Location +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Where the finding is: host and port, URL, file path or package. + + +### Evidence +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: What demonstrated the finding, such as the request and response. + + +### Remediation +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The recommended fix. + + +### Exploit Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether an exploit is publicly available. + + +### Affected Elements +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: Catalogued elements the finding affects - the tested asset, and any catalogued element at the affected location or among the compromised resources. Each is linked with an AssociatedAnnotation relationship. + + +### Previous Finding +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: The same finding in an earlier run. Linked with an AnnotationExtension relationship. + + +### Effective From +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The beginning of when an element is viewable. + + +### Effective Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The time at which an element must be effective in order to be returned by the request. + + +### Effective To +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The ending time at which an element is visible. + + +### External Source GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: The unique identifier of an external source. + + +### External Source Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The name of an external source + + +### For Duplicate Processing +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support duplicate processing. + + +### For Lineage +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support lineage. + + +### Request ID +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user provided or system generated request id for a conversation. + + +### Anchor ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the anchoring element. + + +### Anchor Scope ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Anchor scope to restrict search. + +> **Alternative Labels**: Anchor Scope + + +### Glossary Term +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Term that provides meaning to this field. + +> **Alternative Labels**: Term + + +### Is Own Anchor +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the element is its own anchor or is anchored to a different element. + +> **Alternative Labels**: Own Anchor + +> **Default Value**: true + + +### Merge Update +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the update should be a merge or replace. + +> **Alternative Labels**: isMergeUpdate + +> **Default Value**: true + + +### Parent at End1 +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the parent is at end1 of the relationship + +> **Default Value**: true + + +### Parent ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the parent + +> **Alternative Labels**: Parent; + + +### Parent Relationship Attributes +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: A dictionary of relationship attributes to establish the parent relationship. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Parent Relationship Type Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The type of parent relationship. + + +### Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Repository or element header status for an element. + +> **Default Value**: ACTIVE + + +### Zone Membership +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Zones scope visibility of elements to different users. + + +### Additional Properties +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Additional Properties allow arbitrary properties not defined in the type definitions to be added to any referenceable element. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Confidence Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidenceLevel enum: UNCLASSIFIED=0, AD_HOC=1, TRANSACTIONAL=2, AUTHORITATIVE=3, DERIVED=4, OBSOLETE=5, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,AD_HOC,TRANSACTIONAL,AUTHORITATIVE,DERIVED,OBSOLETE,OTHER + + +### Confidentiality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidentialityLevel enum: UNCLASSIFIED=0, INTERNAL=1, CONFIDENTIAL=2, SENSITIVE=3, RESTRICTED=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,INTERNAL,CONFIDENTIAL,SENSITIVE,RESTRICTED,OTHER + + +### Criticality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses CriticalityLevel enum: UNCLASSIFIED=0, MARGINAL=1, IMPORTANT=2, CRITICAL=3, CATASTROPHIC=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,MARGINAL,IMPORTANT,CRITICAL,CATASTROPHIC,OTHER + + +### Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: An identier + +> **Alternative Labels**: ID + + +### Impact Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, severity_identifier: int}. severity_identifier uses ImpactSeverity enum: UNCLASSIFIED=0, LOW=1, MEDIUM=2, HIGH=3, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,LOW,MEDIUM,HIGH,OTHER + + +### Policy Management Point +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Combined classification from 0435. Applied to Referenceable. Structure: {point_type: str, name: str, description: str}. point_type is one of: PolicyAdministrationPoint, PolicyDecisionPoint, PolicyEnforcementPoint, PolicyInformationPoint, PolicyRetrievalPoint. A Referenceable may have multiple policy management point classifications simultaneously. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Retention Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, basis_identifier: int, associated_guid: str, archive_after: date, delete_after: date}. basis_identifier uses RetentionBasis enum: UNCLASSIFIED=0, TEMPORARY=1, PROJECT_LIFETIME=2, TEAM_LIFETIME=3, CONTRACT_LIFETIME=4, REGULATED_LIFETIME=5, TIMEBOXED_LIFETIME=6, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,TEMPORARY,PROJECT_LIFETIME,TEAM_LIFETIME,CONTRACT_LIFETIME,REGULATED_LIFETIME,TIMEBOXED_LIFETIME,OTHER + + +### Security Tags +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Optional security tags for security processing. + + +### User Defined Content Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user defined content status = only valid if content status is OTHER. + + +### CVSS Vector +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The CVSS vector string. + + +### Vulnerability Type +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: A reference data value naming the type of vulnerability. Linked with a ReferenceValueAssignment relationship. + + +### User Defined Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Only valid if Status is set to OTHER. User defined & managed status values. + + +### Classifications +> **Input Required**: false + +> **Attribute Type**: Named DICT + +> **Description**: Optionally specify the initial classifications for a collection. Multiple classifications can be specified. + +> **Alternative Labels**: classification + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Anchor Scope Name +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Optional qualified name of an anchor scope. + + +### Supplementary Properties +> **Input Required**: False + +> **Attribute Type**: Named DICT + +> **Description**: Provide supplementary information to the element using the structure of a glossary term + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +___ diff --git a/sample-data/templates/advanced/Security Officer/Create_Security_Posture_Summary.md b/sample-data/templates/advanced/Security Officer/Create_Security_Posture_Summary.md new file mode 100644 index 00000000..d6f11005 --- /dev/null +++ b/sample-data/templates/advanced/Security Officer/Create_Security_Posture_Summary.md @@ -0,0 +1,492 @@ +___ + +## Create Security Posture Summary +> The summary of one security test run: findings by severity, resources in scope and tested, and new and resolved findings. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Finding Counts By Severity +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Number of findings at each severity, one 'severity: count' pair per line (or a JSON object). + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Resources In Scope Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Number of resources in scope for the run. + + +### Resources Tested Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Number of resources the run tested. + + +### New Finding Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Findings seen for the first time in this run. + + +### Resolved Finding Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Findings from earlier runs that are no longer detected. + + +### Effective From +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The beginning of when an element is viewable. + + +### Effective Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The time at which an element must be effective in order to be returned by the request. + + +### Effective To +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The ending time at which an element is visible. + + +### External Source GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: The unique identifier of an external source. + + +### External Source Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The name of an external source + + +### For Duplicate Processing +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support duplicate processing. + + +### For Lineage +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support lineage. + + +### Request ID +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user provided or system generated request id for a conversation. + + +### Anchor ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the anchoring element. + + +### Anchor Scope ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Anchor scope to restrict search. + +> **Alternative Labels**: Anchor Scope + + +### Glossary Term +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Term that provides meaning to this field. + +> **Alternative Labels**: Term + + +### Is Own Anchor +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the element is its own anchor or is anchored to a different element. + +> **Alternative Labels**: Own Anchor + +> **Default Value**: true + + +### Merge Update +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the update should be a merge or replace. + +> **Alternative Labels**: isMergeUpdate + +> **Default Value**: true + + +### Parent at End1 +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the parent is at end1 of the relationship + +> **Default Value**: true + + +### Parent ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the parent + +> **Alternative Labels**: Parent; + + +### Parent Relationship Attributes +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: A dictionary of relationship attributes to establish the parent relationship. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Parent Relationship Type Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The type of parent relationship. + + +### Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Repository or element header status for an element. + +> **Default Value**: ACTIVE + + +### Zone Membership +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Zones scope visibility of elements to different users. + + +### Additional Properties +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Additional Properties allow arbitrary properties not defined in the type definitions to be added to any referenceable element. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Confidence Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidenceLevel enum: UNCLASSIFIED=0, AD_HOC=1, TRANSACTIONAL=2, AUTHORITATIVE=3, DERIVED=4, OBSOLETE=5, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,AD_HOC,TRANSACTIONAL,AUTHORITATIVE,DERIVED,OBSOLETE,OTHER + + +### Confidentiality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidentialityLevel enum: UNCLASSIFIED=0, INTERNAL=1, CONFIDENTIAL=2, SENSITIVE=3, RESTRICTED=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,INTERNAL,CONFIDENTIAL,SENSITIVE,RESTRICTED,OTHER + + +### Criticality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses CriticalityLevel enum: UNCLASSIFIED=0, MARGINAL=1, IMPORTANT=2, CRITICAL=3, CATASTROPHIC=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,MARGINAL,IMPORTANT,CRITICAL,CATASTROPHIC,OTHER + + +### Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: An identier + +> **Alternative Labels**: ID + + +### Impact Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, severity_identifier: int}. severity_identifier uses ImpactSeverity enum: UNCLASSIFIED=0, LOW=1, MEDIUM=2, HIGH=3, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,LOW,MEDIUM,HIGH,OTHER + + +### Policy Management Point +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Combined classification from 0435. Applied to Referenceable. Structure: {point_type: str, name: str, description: str}. point_type is one of: PolicyAdministrationPoint, PolicyDecisionPoint, PolicyEnforcementPoint, PolicyInformationPoint, PolicyRetrievalPoint. A Referenceable may have multiple policy management point classifications simultaneously. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Retention Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, basis_identifier: int, associated_guid: str, archive_after: date, delete_after: date}. basis_identifier uses RetentionBasis enum: UNCLASSIFIED=0, TEMPORARY=1, PROJECT_LIFETIME=2, TEAM_LIFETIME=3, CONTRACT_LIFETIME=4, REGULATED_LIFETIME=5, TIMEBOXED_LIFETIME=6, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,TEMPORARY,PROJECT_LIFETIME,TEAM_LIFETIME,CONTRACT_LIFETIME,REGULATED_LIFETIME,TIMEBOXED_LIFETIME,OTHER + + +### Security Tags +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Optional security tags for security processing. + + +### User Defined Content Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user defined content status = only valid if content status is OTHER. + + +### User Defined Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Only valid if Status is set to OTHER. User defined & managed status values. + + +### Classifications +> **Input Required**: false + +> **Attribute Type**: Named DICT + +> **Description**: Optionally specify the initial classifications for a collection. Multiple classifications can be specified. + +> **Alternative Labels**: classification + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Anchor Scope Name +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Optional qualified name of an anchor scope. + + +### Supplementary Properties +> **Input Required**: False + +> **Attribute Type**: Named DICT + +> **Description**: Provide supplementary information to the element using the structure of a glossary term + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +___ diff --git a/sample-data/templates/advanced/Security Officer/Create_Survey_Report.md b/sample-data/templates/advanced/Security Officer/Create_Survey_Report.md new file mode 100644 index 00000000..4aa1fb65 --- /dev/null +++ b/sample-data/templates/advanced/Security Officer/Create_Survey_Report.md @@ -0,0 +1,436 @@ +___ + +## Create Survey Report +> A survey report catalogues one run of an analysis, such as a vulnerability scan or penetration test. Category says what kind of test it was, for example Penetration Test Results. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Start Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Date/time (ISO 8601) that the work started - for a promise, work on delivering the promised resource; for a report, the run that produced it. + + +### Completion Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Date/time (ISO 8601) that the work finished - for a promise, when the promised resource was delivered; for a report, when the run completed. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Purpose +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The purpose of this collection — a short description of why it exists or what it is used for. + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Report Subjects +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: The assets or other elements that the run tested. Each is linked with a ReportSubject relationship. + + +### Effective From +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The beginning of when an element is viewable. + + +### Effective Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The time at which an element must be effective in order to be returned by the request. + + +### Effective To +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The ending time at which an element is visible. + + +### External Source GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: The unique identifier of an external source. + + +### External Source Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The name of an external source + + +### For Duplicate Processing +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support duplicate processing. + + +### For Lineage +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support lineage. + + +### Request ID +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user provided or system generated request id for a conversation. + + +### Anchor ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the anchoring element. + + +### Anchor Scope ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Anchor scope to restrict search. + +> **Alternative Labels**: Anchor Scope + + +### Glossary Term +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Term that provides meaning to this field. + +> **Alternative Labels**: Term + + +### Is Own Anchor +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the element is its own anchor or is anchored to a different element. + +> **Alternative Labels**: Own Anchor + +> **Default Value**: true + + +### Merge Update +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the update should be a merge or replace. + +> **Alternative Labels**: isMergeUpdate + +> **Default Value**: true + + +### Parent at End1 +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the parent is at end1 of the relationship + +> **Default Value**: true + + +### Parent ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the parent + +> **Alternative Labels**: Parent; + + +### Parent Relationship Attributes +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: A dictionary of relationship attributes to establish the parent relationship. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Parent Relationship Type Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The type of parent relationship. + + +### Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Repository or element header status for an element. + +> **Default Value**: ACTIVE + + +### Zone Membership +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Zones scope visibility of elements to different users. + + +### Additional Properties +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Additional Properties allow arbitrary properties not defined in the type definitions to be added to any referenceable element. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Confidence Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidenceLevel enum: UNCLASSIFIED=0, AD_HOC=1, TRANSACTIONAL=2, AUTHORITATIVE=3, DERIVED=4, OBSOLETE=5, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,AD_HOC,TRANSACTIONAL,AUTHORITATIVE,DERIVED,OBSOLETE,OTHER + + +### Confidentiality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidentialityLevel enum: UNCLASSIFIED=0, INTERNAL=1, CONFIDENTIAL=2, SENSITIVE=3, RESTRICTED=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,INTERNAL,CONFIDENTIAL,SENSITIVE,RESTRICTED,OTHER + + +### Criticality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses CriticalityLevel enum: UNCLASSIFIED=0, MARGINAL=1, IMPORTANT=2, CRITICAL=3, CATASTROPHIC=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,MARGINAL,IMPORTANT,CRITICAL,CATASTROPHIC,OTHER + + +### Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: An identier + +> **Alternative Labels**: ID + + +### Impact Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, severity_identifier: int}. severity_identifier uses ImpactSeverity enum: UNCLASSIFIED=0, LOW=1, MEDIUM=2, HIGH=3, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,LOW,MEDIUM,HIGH,OTHER + + +### Policy Management Point +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Combined classification from 0435. Applied to Referenceable. Structure: {point_type: str, name: str, description: str}. point_type is one of: PolicyAdministrationPoint, PolicyDecisionPoint, PolicyEnforcementPoint, PolicyInformationPoint, PolicyRetrievalPoint. A Referenceable may have multiple policy management point classifications simultaneously. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Retention Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, basis_identifier: int, associated_guid: str, archive_after: date, delete_after: date}. basis_identifier uses RetentionBasis enum: UNCLASSIFIED=0, TEMPORARY=1, PROJECT_LIFETIME=2, TEAM_LIFETIME=3, CONTRACT_LIFETIME=4, REGULATED_LIFETIME=5, TIMEBOXED_LIFETIME=6, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,TEMPORARY,PROJECT_LIFETIME,TEAM_LIFETIME,CONTRACT_LIFETIME,REGULATED_LIFETIME,TIMEBOXED_LIFETIME,OTHER + + +### Security Tags +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Optional security tags for security processing. + + +### User Defined Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Only valid if Status is set to OTHER. User defined & managed status values. + + +### Classifications +> **Input Required**: false + +> **Attribute Type**: Named DICT + +> **Description**: Optionally specify the initial classifications for a collection. Multiple classifications can be specified. + +> **Alternative Labels**: classification + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Anchor Scope Name +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Optional qualified name of an anchor scope. + + +### Supplementary Properties +> **Input Required**: False + +> **Attribute Type**: Named DICT + +> **Description**: Provide supplementary information to the element using the structure of a glossary term + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +___ diff --git a/sample-data/templates/advanced/Security Officer/Create_Vulnerability_Finding.md b/sample-data/templates/advanced/Security Officer/Create_Vulnerability_Finding.md new file mode 100644 index 00000000..00822ea2 --- /dev/null +++ b/sample-data/templates/advanced/Security Officer/Create_Vulnerability_Finding.md @@ -0,0 +1,578 @@ +___ + +## Create Vulnerability Finding +> A known vulnerability in the software a resource uses, typically from a vulnerability scan. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Severity +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The CVSS severity rating of the finding. + +> **Valid Values**: None,Low,Medium,High,Critical + + +### CVSS Score +> **Input Required**: False + +> **Attribute Type**: Simple Float + +> **Description**: CVSS base score, 0.0 to 10.0. + + +### Vulnerability Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the vulnerability, such as CVE identifiers. + + +### Weakness Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the weakness, such as CWE identifiers. + + +### Affected Location +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Where the finding is: host and port, URL, file path or package. + + +### Evidence +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: What demonstrated the finding, such as the request and response. + + +### Remediation +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The recommended fix. + + +### Exploit Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether an exploit is publicly available. + + +### Affected Elements +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: Catalogued elements the finding affects - the tested asset, and any catalogued element at the affected location or among the compromised resources. Each is linked with an AssociatedAnnotation relationship. + + +### Previous Finding +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: The same finding in an earlier run. Linked with an AnnotationExtension relationship. + + +### Package URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Package URL (purl) of the vulnerable software. + + +### Installed Version +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The installed version of the vulnerable software. + + +### Fixed Version +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The first version with the fix. + + +### Patch Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether a patch is available. + + +### Effective From +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The beginning of when an element is viewable. + + +### Effective Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The time at which an element must be effective in order to be returned by the request. + + +### Effective To +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The ending time at which an element is visible. + + +### External Source GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: The unique identifier of an external source. + + +### External Source Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The name of an external source + + +### For Duplicate Processing +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support duplicate processing. + + +### For Lineage +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Flag indicating if the request is to support lineage. + + +### Request ID +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user provided or system generated request id for a conversation. + + +### Anchor ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the anchoring element. + + +### Anchor Scope ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Anchor scope to restrict search. + +> **Alternative Labels**: Anchor Scope + + +### Glossary Term +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Term that provides meaning to this field. + +> **Alternative Labels**: Term + + +### Is Own Anchor +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the element is its own anchor or is anchored to a different element. + +> **Alternative Labels**: Own Anchor + +> **Default Value**: true + + +### Merge Update +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the update should be a merge or replace. + +> **Alternative Labels**: isMergeUpdate + +> **Default Value**: true + + +### Parent at End1 +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: A flag indicating if the parent is at end1 of the relationship + +> **Default Value**: true + + +### Parent ID +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Name of the parent + +> **Alternative Labels**: Parent; + + +### Parent Relationship Attributes +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: A dictionary of relationship attributes to establish the parent relationship. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Parent Relationship Type Name +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The type of parent relationship. + + +### Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Repository or element header status for an element. + +> **Default Value**: ACTIVE + + +### Zone Membership +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Zones scope visibility of elements to different users. + + +### Additional Properties +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Additional Properties allow arbitrary properties not defined in the type definitions to be added to any referenceable element. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Confidence Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidenceLevel enum: UNCLASSIFIED=0, AD_HOC=1, TRANSACTIONAL=2, AUTHORITATIVE=3, DERIVED=4, OBSOLETE=5, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,AD_HOC,TRANSACTIONAL,AUTHORITATIVE,DERIVED,OBSOLETE,OTHER + + +### Confidentiality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses ConfidentialityLevel enum: UNCLASSIFIED=0, INTERNAL=1, CONFIDENTIAL=2, SENSITIVE=3, RESTRICTED=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,INTERNAL,CONFIDENTIAL,SENSITIVE,RESTRICTED,OTHER + + +### Criticality Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, level_identifier: int}. level_identifier uses CriticalityLevel enum: UNCLASSIFIED=0, MARGINAL=1, IMPORTANT=2, CRITICAL=3, CATASTROPHIC=4, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,MARGINAL,IMPORTANT,CRITICAL,CATASTROPHIC,OTHER + + +### Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: An identier + +> **Alternative Labels**: ID + + +### Impact Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, severity_identifier: int}. severity_identifier uses ImpactSeverity enum: UNCLASSIFIED=0, LOW=1, MEDIUM=2, HIGH=3, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,LOW,MEDIUM,HIGH,OTHER + + +### Policy Management Point +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Combined classification from 0435. Applied to Referenceable. Structure: {point_type: str, name: str, description: str}. point_type is one of: PolicyAdministrationPoint, PolicyDecisionPoint, PolicyEnforcementPoint, PolicyInformationPoint, PolicyRetrievalPoint. A Referenceable may have multiple policy management point classifications simultaneously. + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Retention Classification +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: Classification from 0422. Structure: {status_identifier: int, confidence: int, steward: str, steward_type_name: str, steward_property_name: str, source: str, notes: str, basis_identifier: int, associated_guid: str, archive_after: date, delete_after: date}. basis_identifier uses RetentionBasis enum: UNCLASSIFIED=0, TEMPORARY=1, PROJECT_LIFETIME=2, TEAM_LIFETIME=3, CONTRACT_LIFETIME=4, REGULATED_LIFETIME=5, TIMEBOXED_LIFETIME=6, OTHER=99. + +> **Valid Values**: UNCLASSIFIED,TEMPORARY,PROJECT_LIFETIME,TEAM_LIFETIME,CONTRACT_LIFETIME,REGULATED_LIFETIME,TIMEBOXED_LIFETIME,OTHER + + +### Security Tags +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Optional security tags for security processing. + + +### User Defined Content Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user defined content status = only valid if content status is OTHER. + + +### CVSS Vector +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The CVSS vector string. + + +### Vulnerability Type +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: A reference data value naming the type of vulnerability. Linked with a ReferenceValueAssignment relationship. + + +### User Defined Status +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Only valid if Status is set to OTHER. User defined & managed status values. + + +### Classifications +> **Input Required**: false + +> **Attribute Type**: Named DICT + +> **Description**: Optionally specify the initial classifications for a collection. Multiple classifications can be specified. + +> **Alternative Labels**: classification + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Anchor Scope Name +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: Optional qualified name of an anchor scope. + + +### Supplementary Properties +> **Input Required**: False + +> **Attribute Type**: Named DICT + +> **Description**: Provide supplementary information to the element using the structure of a glossary term + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +___ diff --git a/sample-data/templates/basic/Curation/Classify_Promise.md b/sample-data/templates/basic/Curation/Classify_Promise.md index 10b274f3..d8339a7c 100644 --- a/sample-data/templates/basic/Curation/Classify_Promise.md +++ b/sample-data/templates/basic/Curation/Classify_Promise.md @@ -24,7 +24,7 @@ ___ > **Attribute Type**: Simple -> **Description**: Date/time (ISO 8601) that work started on delivering the promised resource. +> **Description**: Date/time (ISO 8601) that the work started - for a promise, work on delivering the promised resource; for a report, the run that produced it. ### Due Time @@ -48,7 +48,7 @@ ___ > **Attribute Type**: Simple -> **Description**: Date/time (ISO 8601) that the promised resource was delivered. +> **Description**: Date/time (ISO 8601) that the work finished - for a promise, when the promised resource was delivered; for a report, when the run completed. ### Journal Entry diff --git a/sample-data/templates/basic/Security Officer/Create_Penetration_Test_Finding.md b/sample-data/templates/basic/Security Officer/Create_Penetration_Test_Finding.md new file mode 100644 index 00000000..377a7e8e --- /dev/null +++ b/sample-data/templates/basic/Security Officer/Create_Penetration_Test_Finding.md @@ -0,0 +1,254 @@ +___ + +## Create Penetration Test Finding +> A weakness a penetration test was able to exploit. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Severity +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The CVSS severity rating of the finding. + +> **Valid Values**: None,Low,Medium,High,Critical + + +### CVSS Score +> **Input Required**: False + +> **Attribute Type**: Simple Float + +> **Description**: CVSS base score, 0.0 to 10.0. + + +### Vulnerability Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the vulnerability, such as CVE identifiers. + + +### Weakness Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the weakness, such as CWE identifiers. + + +### Affected Location +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Where the finding is: host and port, URL, file path or package. + + +### Evidence +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: What demonstrated the finding, such as the request and response. + + +### Remediation +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The recommended fix. + + +### Exploit Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether an exploit is publicly available. + + +### Affected Elements +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: Catalogued elements the finding affects - the tested asset, and any catalogued element at the affected location or among the compromised resources. Each is linked with an AssociatedAnnotation relationship. + + +### Previous Finding +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: The same finding in an earlier run. Linked with an AnnotationExtension relationship. + + +### Attack Vector +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: How the weakness was reached, such as Network, Adjacent network, Local, Physical or Social engineering. + + +### Attack Techniques +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Techniques used, such as MITRE ATT&CK technique identifiers. + + +### Privileges Gained +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The privileges the tester gained. + + +### Compromised Resources +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Names of the resources reached or controlled. + + +### Reproduction Steps +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: How to reproduce the finding. + + +___ diff --git a/sample-data/templates/basic/Security Officer/Create_Security_Finding.md b/sample-data/templates/basic/Security Officer/Create_Security_Finding.md new file mode 100644 index 00000000..0d8852f1 --- /dev/null +++ b/sample-data/templates/basic/Security Officer/Create_Security_Finding.md @@ -0,0 +1,214 @@ +___ + +## Create Security Finding +> A security finding from a test run that is neither a known vulnerability nor a penetration test finding, such as an insecure configuration. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Severity +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The CVSS severity rating of the finding. + +> **Valid Values**: None,Low,Medium,High,Critical + + +### CVSS Score +> **Input Required**: False + +> **Attribute Type**: Simple Float + +> **Description**: CVSS base score, 0.0 to 10.0. + + +### Vulnerability Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the vulnerability, such as CVE identifiers. + + +### Weakness Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the weakness, such as CWE identifiers. + + +### Affected Location +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Where the finding is: host and port, URL, file path or package. + + +### Evidence +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: What demonstrated the finding, such as the request and response. + + +### Remediation +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The recommended fix. + + +### Exploit Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether an exploit is publicly available. + + +### Affected Elements +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: Catalogued elements the finding affects - the tested asset, and any catalogued element at the affected location or among the compromised resources. Each is linked with an AssociatedAnnotation relationship. + + +### Previous Finding +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: The same finding in an earlier run. Linked with an AnnotationExtension relationship. + + +___ diff --git a/sample-data/templates/basic/Security Officer/Create_Security_Posture_Summary.md b/sample-data/templates/basic/Security Officer/Create_Security_Posture_Summary.md new file mode 100644 index 00000000..f90f7dc7 --- /dev/null +++ b/sample-data/templates/basic/Security Officer/Create_Security_Posture_Summary.md @@ -0,0 +1,176 @@ +___ + +## Create Security Posture Summary +> The summary of one security test run: findings by severity, resources in scope and tested, and new and resolved findings. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Finding Counts By Severity +> **Input Required**: False + +> **Attribute Type**: Dictionary + +> **Description**: Number of findings at each severity, one 'severity: count' pair per line (or a JSON object). + +> | Parameter Name | Parameter Value | +> |---|---| +> | example_key | example_value | + + +### Resources In Scope Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Number of resources in scope for the run. + + +### Resources Tested Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Number of resources the run tested. + + +### New Finding Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Findings seen for the first time in this run. + + +### Resolved Finding Count +> **Input Required**: False + +> **Attribute Type**: Simple Int + +> **Description**: Findings from earlier runs that are no longer detected. + + +___ diff --git a/sample-data/templates/basic/Security Officer/Create_Survey_Report.md b/sample-data/templates/basic/Security Officer/Create_Survey_Report.md new file mode 100644 index 00000000..79baa739 --- /dev/null +++ b/sample-data/templates/basic/Security Officer/Create_Survey_Report.md @@ -0,0 +1,128 @@ +___ + +## Create Survey Report +> A survey report catalogues one run of an analysis, such as a vulnerability scan or penetration test. Category says what kind of test it was, for example Penetration Test Results. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Start Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Date/time (ISO 8601) that the work started - for a promise, work on delivering the promised resource; for a report, the run that produced it. + + +### Completion Time +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Date/time (ISO 8601) that the work finished - for a promise, when the promised resource was delivered; for a report, when the run completed. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Purpose +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The purpose of this collection — a short description of why it exists or what it is used for. + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Report Subjects +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: The assets or other elements that the run tested. Each is linked with a ReportSubject relationship. + + +___ diff --git a/sample-data/templates/basic/Security Officer/Create_Vulnerability_Finding.md b/sample-data/templates/basic/Security Officer/Create_Vulnerability_Finding.md new file mode 100644 index 00000000..1d9ab395 --- /dev/null +++ b/sample-data/templates/basic/Security Officer/Create_Vulnerability_Finding.md @@ -0,0 +1,246 @@ +___ + +## Create Vulnerability Finding +> A known vulnerability in the software a resource uses, typically from a vulnerability scan. + +### Display Name +> **Input Required**: True + +> **Attribute Type**: Simple + +> **Description**: The common name of an element. + +> **Alternative Labels**: "Term Name" + + +### Survey Report +> **Input Required**: True + +> **Attribute Type**: Reference Name + +> **Description**: The survey report for the test run this belongs to. Linked with a ReportedAnnotation relationship. + + +### Summary +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A short summary of the element's meaning or purpose. + + +### Journal Entry +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A text entry into a journal. + + +### Category +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A user-defined category for the element, used to group related elements for display or search purposes. + +> **Alternative Labels**: Category Name + + +### Description +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: A description. + + +### Legal +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Copyright and/or license information for the element or associated resource. + + +### Qualified Name +> **Input Required**: False + +> **Attribute Type**: QN + +> **Description**: The unique, text name of an element. + + +### Content Status +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The lifecycle status of an element. + +> **Valid Values**: DRAFT,PREPARED,PROPOSED,APPROVED,REJECTED,ACTIVE,DEPRECATED,OTHER + +> **Default Value**: ACTIVE + + +### Search Keywords +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: A list of search keywords. + + +### GUID +> **Input Required**: False + +> **Attribute Type**: GUID + +> **Description**: A unique identifier - typically of an element in this context. + +> **Alternative Labels**: guid; Guid + + +### URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: URL for further information. + + +### Version Identifier +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The version of the element + +> **Alternative Labels**: Version + +> **Default Value**: 1.0 + + +### Authors +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: The authors. + + +### Severity +> **Input Required**: False + +> **Attribute Type**: Valid Value + +> **Description**: The CVSS severity rating of the finding. + +> **Valid Values**: None,Low,Medium,High,Critical + + +### CVSS Score +> **Input Required**: False + +> **Attribute Type**: Simple Float + +> **Description**: CVSS base score, 0.0 to 10.0. + + +### Vulnerability Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the vulnerability, such as CVE identifiers. + + +### Weakness Identifiers +> **Input Required**: False + +> **Attribute Type**: Simple List + +> **Description**: Identifiers of the weakness, such as CWE identifiers. + + +### Affected Location +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Where the finding is: host and port, URL, file path or package. + + +### Evidence +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: What demonstrated the finding, such as the request and response. + + +### Remediation +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The recommended fix. + + +### Exploit Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether an exploit is publicly available. + + +### Affected Elements +> **Input Required**: False + +> **Attribute Type**: Reference Name List + +> **Description**: Catalogued elements the finding affects - the tested asset, and any catalogued element at the affected location or among the compromised resources. Each is linked with an AssociatedAnnotation relationship. + + +### Previous Finding +> **Input Required**: False + +> **Attribute Type**: Reference Name + +> **Description**: The same finding in an earlier run. Linked with an AnnotationExtension relationship. + + +### Package URL +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: Package URL (purl) of the vulnerable software. + + +### Installed Version +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The installed version of the vulnerable software. + + +### Fixed Version +> **Input Required**: False + +> **Attribute Type**: Simple + +> **Description**: The first version with the fix. + + +### Patch Available +> **Input Required**: False + +> **Attribute Type**: Bool + +> **Description**: Whether a patch is available. + + +___ diff --git a/tests/dr-egeria-command-tests/dr_test_security_findings.md b/tests/dr-egeria-command-tests/dr_test_security_findings.md new file mode 100644 index 00000000..826f5ca8 --- /dev/null +++ b/tests/dr-egeria-command-tests/dr_test_security_findings.md @@ -0,0 +1,282 @@ +# Security Officer — Survey Report and Security Finding Test + +Exercises the security testing commands added for Egeria 6.3 (model 0665): a +stand-in tested system, two penetration test runs catalogued as survey reports, +findings of each type under the first run, a posture summary per run, and a +finding in the second run linked to the same finding in the first. SF-8 +updates a finding to show the Create/Update transition. + +Every element is named "SecTest4 ..." so it is easy to find and remove. + +___ + +# SF-1: The system that was tested + +## Create Collection + +### Display Name +SecTest4 Supplier Portal + +### Qualified Name +Collection::SecTest4 Supplier Portal + +### Description +Stands in for the supplier portal asset that was tested. + +___ + +# SF-2: The first test run + +## Create Survey Report + +### Display Name +SecTest4 Supplier Portal 2026-Q4 Penetration Test + +### Qualified Name +SurveyReport::SecTest4::2026-Q4 + +### Category +Penetration Test Results + +### Purpose +Quarterly penetration test of the supplier portal. + +### Start Time +2026-10-20T09:00:00Z + +### Completion Time +2026-10-24T17:00:00Z + +### Report Subjects +Collection::SecTest4 Supplier Portal + +___ + +# SF-3: A penetration test finding + +## Create Penetration Test Finding + +### Display Name +SecTest4 SQL injection in supplier search + +### Qualified Name +PenetrationTestFinding::SecTest4::2026-Q4::sqli + +### Identifier +PT-2026Q4-1 + +### Survey Report +SurveyReport::SecTest4::2026-Q4 + +### Severity +High + +### CVSS Score +8.6 + +### Weakness Identifiers +CWE-89 + +### Affected Location +https://supplier-portal/search + +### Exploit Available +True + +### Attack Vector +Network + +### Attack Techniques +T1190 + +### Privileges Gained +Read access to the supplier database. + +### Compromised Resources +Supplier Master Register + +### Remediation +Use parameterized queries in the supplier search. + +### Affected Elements +Collection::SecTest4 Supplier Portal + +___ + +# SF-4: A vulnerability finding + +## Create Vulnerability Finding + +### Display Name +SecTest4 Log4Shell in portal backend + +### Qualified Name +VulnerabilityFinding::SecTest4::2026-Q4::log4shell + +### Identifier +SCAN-42 + +### Survey Report +SurveyReport::SecTest4::2026-Q4 + +### Severity +Critical + +### CVSS Score +10.0 + +### Vulnerability Identifiers +CVE-2021-44228 + +### Package URL +pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1 + +### Installed Version +2.14.1 + +### Fixed Version +2.17.1 + +### Patch Available +True + +___ + +# SF-5: Another security finding + +## Create Security Finding + +### Display Name +SecTest4 TLS 1.0 enabled + +### Qualified Name +SecurityFinding::SecTest4::2026-Q4::tls10 + +### Survey Report +SurveyReport::SecTest4::2026-Q4 + +### Severity +Medium + +### Affected Location +supplier-portal:443 + +___ + +# SF-6: The first run's posture summary + +## Create Security Posture Summary + +### Display Name +SecTest4 2026-Q4 posture + +### Qualified Name +SecurityPosture::SecTest4::2026-Q4 + +### Survey Report +SurveyReport::SecTest4::2026-Q4 + +### Finding Counts By Severity +Critical: 1 +High: 1 +Medium: 1 + +### Resources In Scope Count +3 + +### Resources Tested Count +3 + +### New Finding Count +3 + +### Resolved Finding Count +0 + +___ + +# SF-7: The next run, which still finds the TLS issue + +## Create Survey Report + +### Display Name +SecTest4 Supplier Portal 2027-Q1 Penetration Test + +### Qualified Name +SurveyReport::SecTest4::2027-Q1 + +### Category +Penetration Test Results + +### Completion Time +2027-01-24T17:00:00Z + +### Report Subjects +Collection::SecTest4 Supplier Portal + +___ + +## Create Security Finding + +### Display Name +SecTest4 TLS 1.0 still enabled + +### Qualified Name +SecurityFinding::SecTest4::2027-Q1::tls10 + +### Survey Report +SurveyReport::SecTest4::2027-Q1 + +### Severity +Medium + +### Previous Finding +SecurityFinding::SecTest4::2026-Q4::tls10 + +___ + +## Create Security Posture Summary + +### Display Name +SecTest4 2027-Q1 posture + +### Qualified Name +SecurityPosture::SecTest4::2027-Q1 + +### Survey Report +SurveyReport::SecTest4::2027-Q1 + +### Finding Counts By Severity +Medium: 1 + +### Resources In Scope Count +3 + +### Resources Tested Count +3 + +### New Finding Count +0 + +### Resolved Finding Count +2 + +___ + +# SF-8: Update a finding + +## Update Penetration Test Finding + +### Display Name +SecTest4 SQL injection in supplier search + +### Qualified Name +PenetrationTestFinding::SecTest4::2026-Q4::sqli + +### Survey Report +SurveyReport::SecTest4::2026-Q4 + +### Reproduction Steps +Search for `' OR 1=1 --` in the supplier name field. + +___ diff --git a/tests/dr-egeria-command-tests/run_dr_tests.py b/tests/dr-egeria-command-tests/run_dr_tests.py index d5dbede5..6103a8ae 100644 --- a/tests/dr-egeria-command-tests/run_dr_tests.py +++ b/tests/dr-egeria-command-tests/run_dr_tests.py @@ -48,6 +48,7 @@ "dr_test_data_dictionary_0580.md", "dr_test_implemented_by.md", "dr_test_security_officer.md", + "dr_test_security_findings.md", ] diff --git a/tests/micro-tests/test_dr_egeria_security_officer.py b/tests/micro-tests/test_dr_egeria_security_officer.py index 70110902..6c8cd8ff 100644 --- a/tests/micro-tests/test_dr_egeria_security_officer.py +++ b/tests/micro-tests/test_dr_egeria_security_officer.py @@ -87,3 +87,136 @@ def test_related_guids_filters_by_relationship_and_related_type(): assert _related_guids(element, "GovernedBy", "CertificationType") == {"cert"} assert _related_guids(element, "ScopedBy") == {"org"} assert _related_guids(None, "ScopedBy") == set() + + +# --- Survey reports and security findings (model 0665) --- + +from md_processing.v2.security_officer import ( # noqa: E402 + SecurityFindingProcessor, SurveyReportProcessor, _annotation_properties, +) + + +def test_annotation_properties_maps_type_fields_and_skips_unset(): + props = _annotation_properties("VulnerabilityAnnotation", "VulnerabilityFinding::x", { + "Display Name": {"value": "Log4Shell"}, + "Severity": {"value": "Critical"}, + "CVSS Score": {"value": 10.0}, + "Package URL": {"value": "pkg:maven/x@1"}, + "Exploit Available": {"value": None}, + "Vulnerability Identifiers": {"value": ["CVE-2021-44228"]}, + "Weakness Identifiers": {"value": []}, + }) + assert props["class"] == "VulnerabilityAnnotationProperties" + assert props["severity"] == "Critical" and props["cvssScore"] == 10.0 + assert props["packageURL"] == "pkg:maven/x@1" + assert props["vulnerabilityIdentifiers"] == ["CVE-2021-44228"] + assert "exploitAvailable" not in props and "weaknessIdentifiers" not in props + + +def test_annotation_properties_posture_counts_are_ints(): + props = _annotation_properties("SecurityPostureAnnotation", "SecurityPosture::x", { + "Finding Counts By Severity": {"value": {"Critical": "1", "High": "4"}}, + "Resources In Scope Count": {"value": 3}, + }) + assert props["class"] == "SecurityPostureAnnotationProperties" + assert props["findingCountsBySeverity"] == {"Critical": 1, "High": 4} + assert props["resourcesInScopeCount"] == 3 + + +NEW_GUID = "5b0e2f7c-1c1a-4d55-9a3e-6f0d2b8c9e11" + + +class _FindingClient: + def __init__(self): + self.calls = [] + + async def _async_create_annotation(self, body): + self.calls.append(("create", body)) + return NEW_GUID + + async def _async_link_annotation_to_described_element(self, annotation_guid, element_guid, body): + self.calls.append(("associated", annotation_guid, element_guid)) + + async def _async_link_annotation_to_its_predecessor(self, annotation_guid, predecessor_guid, body): + self.calls.append(("predecessor", annotation_guid, predecessor_guid)) + + +def _finding_processor(client, attributes, om_type="PenetrationTestFindingAnnotation"): + proc = SecurityFindingProcessor.__new__(SecurityFindingProcessor) + proc.client = client + proc.command = type("Cmd", (), {"verb": "Create", "object_type": "Penetration Test Finding", "raw_block": ""})() + proc.parsed_output = {"qualified_name": "PenetrationTestFinding::x", "attributes": attributes} + proc.as_is_element = None + proc.get_command_spec = lambda: {"OM_TYPE": om_type} + + async def render(guid): + return guid + proc.render_result_markdown = render + proc.add_related_result = lambda *a, **k: None + return proc + + +@pytest.mark.asyncio +async def test_new_finding_is_created_under_its_report_and_linked(monkeypatch): + monkeypatch.setattr("md_processing.v2.security_officer.update_element_dictionary", lambda *a, **k: None) + client = _FindingClient() + await _finding_processor(client, { + "Display Name": {"value": "SQL injection"}, + "Survey Report": {"value": "SurveyReport::x", "guid": "report-guid"}, + "Severity": {"value": "High"}, + "Affected Elements": {"value": ["Collection::portal"], "guid_list": ["portal-guid"]}, + "Previous Finding": {"value": "PenetrationTestFinding::old", "guid": "old-guid"}, + }).apply_changes() + + kind, body = client.calls[0] + assert kind == "create" + assert (body["parentGUID"], body["anchorGUID"], body["parentRelationshipTypeName"]) == \ + ("report-guid", "report-guid", "ReportedAnnotation") + assert body["parentAtEnd1"] is True and body["isOwnAnchor"] is False + assert body["properties"]["class"] == "PenetrationTestFindingAnnotationProperties" + assert ("associated", NEW_GUID, "portal-guid") in client.calls + assert ("predecessor", NEW_GUID, "old-guid") in client.calls + + +@pytest.mark.asyncio +async def test_new_finding_without_resolved_report_fails(): + with pytest.raises(ValueError): + await _finding_processor(_FindingClient(), {"Display Name": {"value": "x"}, + "Survey Report": {"value": "missing"}}).apply_changes() + + +class _UpdateClient: + def __init__(self): + self.updates = [] + + async def _async_update_annotation(self, guid, body): + self.updates.append((guid, body)) + + +@pytest.mark.asyncio +async def test_merge_update_carries_primitives_forward(monkeypatch): + # Egeria resets an omitted primitive to 0 / false on a merge update (ISSUE-166). + monkeypatch.setattr("md_processing.v2.security_officer.update_element_dictionary", lambda *a, **k: None) + client = _UpdateClient() + proc = _finding_processor(client, {"Display Name": {"value": "SQL injection"}, + "Reproduction Steps": {"value": "Search for ' OR 1=1"}}) + proc.as_is_element = {"elementHeader": {"guid": NEW_GUID}, + "properties": {"cvssScore": 8.6, "exploitAvailable": True, "severity": "High"}} + proc.filter_update_properties = lambda props, merge: props + await proc.apply_changes() + + props = client.updates[0][1]["properties"] + assert props["cvssScore"] == 8.6 and props["exploitAvailable"] is True + assert props["reproductionSteps"] == "Search for ' OR 1=1" + assert "severity" not in props # non-primitives merge correctly on their own + + +@pytest.mark.asyncio +async def test_command_value_wins_over_current_and_numbers_are_typed(monkeypatch): + monkeypatch.setattr("md_processing.v2.security_officer.update_element_dictionary", lambda *a, **k: None) + client = _UpdateClient() + proc = _finding_processor(client, {"Display Name": {"value": "x"}, "CVSS Score": {"value": "9.1"}}) + proc.as_is_element = {"elementHeader": {"guid": NEW_GUID}, "properties": {"cvssScore": 8.6}} + proc.filter_update_properties = lambda props, merge: props + await proc.apply_changes() + assert client.updates[0][1]["properties"]["cvssScore"] == 9.1