Added Publisher Push
This commit is contained in:
@@ -40,10 +40,16 @@ def addPath(url, policy, hash):
|
||||
print(f"Adding the following Path Exclusions to {policy}:")
|
||||
for p in hash:
|
||||
print(p)
|
||||
|
||||
def addPub(url, policy, publist):
|
||||
print(f"Adding the following Publishers to {policy}:")
|
||||
for p in publist:
|
||||
print(p)
|
||||
|
||||
|
||||
def addHashReal(url, allowlistID, hashlist):
|
||||
endpoint = url + '/v1/hash/application/add'
|
||||
print(ct.colorText("[+] Grabbing All Categories", "cyan"))
|
||||
|
||||
payload = {
|
||||
"applicationid" : allowlistID,
|
||||
"hashes" : hashlist
|
||||
@@ -60,7 +66,6 @@ def addHashReal(url, allowlistID, hashlist):
|
||||
|
||||
def addPathReal(url, grouplistID, pathlist):
|
||||
endpoint = url + '/v1/group/path/add'
|
||||
print(ct.colorText("[+] Grabbing All Categories", "cyan"))
|
||||
payload = {
|
||||
"groupid" : grouplistID,
|
||||
"path" : pathlist
|
||||
@@ -73,6 +78,22 @@ def addPathReal(url, grouplistID, pathlist):
|
||||
response = requests.request("POST", endpoint, headers=headers, data=payload, verify=False)
|
||||
print(response.text)
|
||||
|
||||
|
||||
def addPubReal(url, grouplistID, publist):
|
||||
endpoint = url + '/v1/group/publisher/add'
|
||||
payload = {
|
||||
"groupid" : grouplistID,
|
||||
"publisher" : publist
|
||||
}
|
||||
headers = {
|
||||
"X-APIKey": os.getenv('APIKEY')
|
||||
}
|
||||
print(payload)
|
||||
payload = json.dumps(payload)
|
||||
response = requests.request("POST", endpoint, headers=headers, data=payload, verify=False)
|
||||
print(response.text)
|
||||
|
||||
|
||||
def getPolicyInfo(url, policy, days):
|
||||
executionhist_policy = pd.DataFrame()
|
||||
exehist = pullPolicyExechistories(url, policy, days, True)
|
||||
@@ -92,6 +113,7 @@ def getPolicyInfo(url, policy, days):
|
||||
def sendToPolicy(url, first_policy, second_policy, destination_name, destination_id, allowlist_parent_name, allowlist_parent_id, allowlist_child_name, allowlist_child_id):
|
||||
pathexclusions = pd.read_parquet(f"parquet\\final_path_exclusions_{first_policy}_{second_policy}.parquet")
|
||||
allowbyhash = pd.read_parquet(f"parquet\\final_hash_approvals_{first_policy}_{second_policy}.parquet")
|
||||
publishers = pd.read_parquet(f"parquet\\publishers_{first_policy}_{second_policy}.parquet")
|
||||
|
||||
ct.areYouSure()
|
||||
confirmation = input(ct.colorText("Type 'I AGREE' to continue: ","white"))
|
||||
@@ -114,7 +136,10 @@ def sendToPolicy(url, first_policy, second_policy, destination_name, destination
|
||||
]
|
||||
|
||||
addPathReal(url, destination_id,processed_paths)
|
||||
|
||||
|
||||
publisher_list = publishers['publisher'].tolist()
|
||||
addPubReal(url, destination_id, publisher_list)
|
||||
|
||||
print(ct.colorText(f"Adding hashes to {allowlist_parent_name}", "yellow"))
|
||||
|
||||
allowlist_parenthashlist = allowbyhash[allowbyhash['reputation_status'] == 'KNOWN']['sha256'].unique().tolist()
|
||||
|
||||
Reference in New Issue
Block a user