Cleaned up menu by functionalizing

utils/policyfunctions.py

@@ -12,11 +12,17 @@
 #
 #    You should have received a copy of the GNU Affero General Public License
 #    along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-import requests
+import gc
 import json
 import os
+import pandas as pd
+import re
+import requests
 import utils.pretty as ct
+import utils.allowlist
+
+
+
 
 def addHash(policy, hash):
     print(f"Adding the following hashes to {policy}:")
@@ -65,3 +71,57 @@ def addPathReal(url, grouplistID, pathlist):
     except requests.exceptions.RequestException as e:
         return {"error": str(e)}
 
+def getPolicyInfo(url, policy, days):
+    executionhist_policy = pd.DataFrame()
+    exehist = utils.allowlist.pullPolicyExechistories(url, policy, days, True)
+    data = json.loads(exehist)
+    executionhist_policy = pd.DataFrame(data["response"]["exechistories"])
+    if not executionhist_policy.empty:
+        executionhist_policyxecutionhist_policy = executionhist_policy[['sha256', 'publisher', 'filename', 'hostname', 'username', 'pprocess', 'gprocess', 'commandline']]
+        executionhist_policy = executionhist_policy.drop_duplicates(subset=['sha256', 'filename', 'hostname'])
+        executionhist_policy = executionhist_policy.sort_values(by=['sha256', 'filename'])
+        executionhist_policy.to_parquet(f"parquet\\execution_history_{policy}.parquet", index=False)
+    print(ct.colorText(f"Staging of Execution history for policy: {policy} is complete", "green"))
+    del data
+    del exehist
+    gc.collect()
+    return executionhist_policy
+
+def sendToPolicy(first_policy, second_policy, destination_name, destination_id, allowlist_parent_name, allowlist_parent_id, allowlist_child_name, allowlist_child_id):
+    pathexclusions = pd.read_parquet(f"parquet\\final_path_exclusions_{first_policy}_{second_policy}.parquet")
+    allowbyhash =  pd.read_parquet(f"parquet\\final_hash_approvals_{first_policy}_{second_policy}.parquet")
+
+    ct.areYouSure()
+    confirmation = input(ct.colorText("Type 'I AGREE' to continue: ","white"))
+
+    if confirmation.strip().upper() == "I AGREE":
+        print(ct.colorText("Proceeding with the code...", "yellow"))
+        print(ct.colorText(f"Adding path exclusions to {destination_name}", "yellow"))
+        pathexcludelist = pathexclusions['longestcfp'].unique().tolist()
+
+        # Regex to match a Windows drive letter at the start (e.g., C:\)
+        drive_letter_pattern = re.compile(r'^[a-zA-Z]:\\')
+
+        # Processed list
+        processed_paths = [
+            (path if drive_letter_pattern.match(path) else f"\\\\{path}") + "**"
+            for path in pathexcludelist
+]
+        addPath(destination_id,processed_paths)
+        
+        print(ct.colorText(f"Adding hashes to {allowlist_parent_name}", "yellow"))
+                            
+        allowlist_parenthashlist = allowbyhash[allowbyhash['reputation_status'] == 'KNOWN']['sha256'].unique().tolist()
+        addHash(allowlist_parent_id,allowlist_parenthashlist)
+        
+        print(ct.colorText(f"Adding hashes to {allowlist_child_name}", "yellow"))
+        allowlist_childhashlist = allowbyhash[allowbyhash['reputation_status'] == 'UNKNOWN']['sha256'].unique().tolist()
+        addHash(allowlist_child_id, allowlist_childhashlist)			
+
+        ct.locked()
+        
+        exit()		
+        
+    else:
+        print(ct.colorText("Operation aborted. You MUST EXPLICITLY AGREE to proceed.", "red"))
+