Skip to content

Commit

Permalink
precommit fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
taylorwalton committed Jul 10, 2024
1 parent 97a05c4 commit 6900eb2
Show file tree
Hide file tree
Showing 9 changed files with 1,675 additions and 1,685 deletions.
3,335 changes: 1,656 additions & 1,679 deletions backend/app/connectors/grafana/dashboards/Darktrace/summary.json

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions backend/app/connectors/grafana/schema/dashboards.py
Original file line number Diff line number Diff line change
Expand Up @@ -101,6 +101,7 @@ class CrowdstrikeDashboard(Enum):
class DuoDashboard(Enum):
DUO_AUTH = ("Duo", "duo_auth.json")


class DarktraceDashboard(Enum):
DARKTRACE_SUMMARY = ("Darktrace", "summary.json")

Expand Down
3 changes: 2 additions & 1 deletion backend/app/connectors/grafana/services/dashboards.py
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,8 @@
from loguru import logger

from app.connectors.grafana.schema.dashboards import CarbonBlackDashboard
from app.connectors.grafana.schema.dashboards import CrowdstrikeDashboard, DarktraceDashboard
from app.connectors.grafana.schema.dashboards import CrowdstrikeDashboard
from app.connectors.grafana.schema.dashboards import DarktraceDashboard
from app.connectors.grafana.schema.dashboards import DashboardProvisionRequest
from app.connectors.grafana.schema.dashboards import DuoDashboard
from app.connectors.grafana.schema.dashboards import FortinetDashboard
Expand Down
2 changes: 1 addition & 1 deletion backend/app/integrations/darktrace/services/provision.py
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,8 @@
from sqlalchemy import update
from sqlalchemy.ext.asyncio import AsyncSession

from app.connectors.grafana.schema.dashboards import DashboardProvisionRequest
from app.connectors.grafana.schema.dashboards import DarktraceDashboard
from app.connectors.grafana.schema.dashboards import DashboardProvisionRequest
from app.connectors.grafana.services.dashboards import provision_dashboards
from app.connectors.grafana.utils.universal import create_grafana_client
from app.connectors.graylog.services.management import start_stream
Expand Down
7 changes: 7 additions & 0 deletions backend/app/integrations/markdown/darktrace.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,18 +9,23 @@ For example, you could use the data from this integration to know which model is
The Darktrace integration collects logs for three types of events:

## AI Analyst Alert

Generated by AI that investigates, analyzes, and reports threats within the Darktrace environment. It reviews all Model Breaches and creates events for behaviors of interest to cyber analysts.

## Model Breach Alert

Triggered when a model breach occurs. Models define conditions that alert the system to anomalous behavior, malicious activity, or compliance issues.

## System Status Alert

Informs operators of system health, traffic changes, and errors. Includes host details, event severity, and useful investigation links. Notifications are sent for active and resolved events.

## Acquiring the API Token Pair

An API token pair is required for each Master instance.

### Per-user Token

API tokens can only be created by local users with granted API access permissions.

1. Navigate to the Permissions Admin page (Main Menu - Admin) on the Threat Visualizer.
Expand All @@ -29,13 +34,15 @@ API tokens can only be created by local users with granted API access permission
4. Record the Public and Private tokens securely.

### Global Token

Requires access to the System Config page and appropriate permissions.

1. Navigate to the System Config page on the Threat Visualizer.
2. Select "Settings" and generate new API tokens.
3. Record the Public and Private tokens securely.

## Token Usage

Both tokens are required to generate the DT-API Signature, which must be included with every API request.

For more details, refer to the Darktrace Threat Visualizer API Guide.
4 changes: 3 additions & 1 deletion backend/app/routers/darktrace.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
from fastapi import APIRouter

from app.integrations.darktrace.routes.provision import integration_darktrace_provision_router
from app.integrations.darktrace.routes.provision import (
integration_darktrace_provision_router,
)

# Instantiate the APIRouter
router = APIRouter()
Expand Down
4 changes: 3 additions & 1 deletion backend/app/schedulers/scheduler.py
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,10 @@
from app.schedulers.services.invoke_carbonblack import (
invoke_carbonblack_integration_collect,
)
from app.schedulers.services.invoke_darktrace import (
invoke_darktrace_integration_collect,
)
from app.schedulers.services.invoke_duo import invoke_duo_integration_collect
from app.schedulers.services.invoke_darktrace import invoke_darktrace_integration_collect
from app.schedulers.services.invoke_huntress import invoke_huntress_integration_collect
from app.schedulers.services.invoke_mimecast import invoke_mimecast_integration
from app.schedulers.services.invoke_mimecast import invoke_mimecast_integration_ttp
Expand Down
2 changes: 1 addition & 1 deletion backend/copilot.py
Original file line number Diff line number Diff line change
Expand Up @@ -39,10 +39,10 @@
from app.routers import crowdstrike
from app.routers import customer_provisioning
from app.routers import customers
from app.routers import darktrace
from app.routers import dfir_iris
from app.routers import dnstwist
from app.routers import duo
from app.routers import darktrace
from app.routers import grafana
from app.routers import graylog
from app.routers import healthcheck
Expand Down
2 changes: 1 addition & 1 deletion frontend/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -137,4 +137,4 @@
"engines": {
"node": ">=18.0.0"
}
}
}

0 comments on commit 6900eb2

Please sign in to comment.