From 79a0541871f4bfc1ee116e10f8e169fa8beb1da3 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 19 Aug 2025 17:11:11 -0400
Subject: [PATCH] Working on Policy List Grab

---
 AirlockTools.py                               |   9 +++--
 utils/__pycache__/allowlist.cpython-313.pyc   | Bin 0 -> 1837 bytes
 .../getdeviceevents.cpython-313.pyc           | Bin 3012 -> 3012 bytes
 utils/allowlist.py                            |  33 ++++++++++++++++++
 4 files changed, 40 insertions(+), 2 deletions(-)
 create mode 100644 utils/__pycache__/allowlist.cpython-313.pyc
 create mode 100644 utils/allowlist.py

diff --git a/AirlockTools.py b/AirlockTools.py
index 0995fe8..de6960b 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -1,6 +1,10 @@
 import dotenv
 import os
 import utils.getdeviceevents
+import utils.allowlist
+import urllib3
+
+urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
 
 
 dotenv.load_dotenv()
@@ -18,12 +22,13 @@ def apivalidation():
 def menu():
 	print("\n--- Main Menu ---")
 	print("1. Get All Events for Single Device")
-	print("2. Policy Enforcement Readiness")
-	print("3. Get Device with Highest Blocks in 7 Days")
+	print("2. Get Execution Histories for Allow List")
 	while True:
 		choice = input("Enter Menu Item: ")
 		if choice == '1':
 			utils.getdeviceevents.devicehistory(url)
+		if choice == '2':
+			utils.allowlist.allowlistexechistories(url)
 
 if __name__ == "__main__":
     apivalidation()
\ No newline at end of file
diff --git a/utils/__pycache__/allowlist.cpython-313.pyc b/utils/__pycache__/allowlist.cpython-313.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..f029c4b9dc17a515bd978c618585a58a0ec30fd9
GIT binary patch
literal 1837
zcmcgs%}*Og6rcUF*Easbn6E@-K`n_%!Jw#0gQBRUEg#{dDH~T*b{Z}A6qYQz+u1e2
zT<SxmlJ-y(HHtZvLl5b#$NmX9;(`)u!l7y}<(8EE0e!QuflyWIsUz>qyxI4D@ArFe
z#|P197{O@%^T)-nMTGufhCleD%|Rb*9v~H|+$180D@Qob<_Yhu0ufZc6A^KN%Lw}{
zaHhx|#j{0*M}X(xXFz>`a)8wjrpe`Bd8zz6M|%YgB9m8zyw3p50=Ltn2dSbTG02%h
zKHz)IvTUaYcuRAs9Ipn{;AP1a^PX<zG~0B_70e!#6K7-pJoodNQWlv3c!K$)@0F8O
zSpq{1d2?8eT;@|~{5^!qpu@g*tTZRbklK_BsZr(`Ll*@fS3$YJY|2MGUVYyae!+k7
zi!sb&zv*iTMUaB>X&+6E`)|!~zRf?)h5b`C+z+)e!_cF|VUMy%O@7SHEivRQr#27p
zX5>Wu+I@`U73vr9@l5`N@)JG&fBW^SJ1M3D`T~73n@%umQd>?{4*I|<w}3L~nYB=M
zWhlEqtg^k<k-u<D86(>KylyTiBZi^eunfJZV`ojC>mRu>F^MZQz}62xrQ(f`)SIIj
zfd&_`R>H)gVo7r~8d$+Z|GYwFf*sp39ZUlry0gzNL58D}<7&iR;|CNfn%Xj^LGQg@
zT1%_gz(w~kYXz79sbOWUgE2I$g#}=h#jCius5`DjfL2B%5dht1*J+>KlKmjd!Bf$#
z*pS#}^eZ&_S`ZBv7jf~9ZRw_)iBicXu%W!=08#8>bA?g=qKqBap~0ga6_*^#q>^E2
zB@pW3RhNdaSzg9Ob0Lvt+t@5oNjL4XO9cifmCDPu0||sOF{li$y^J(yYZV4V7+(^C
ziH2>BIQX`Q8ud7XHdY#kh7Kj@kQKm7c$JC<sHcJAqNNuxZ8}1`UDAs#6?GRcJ5j(?
zP7ZqY{oz8+fgTl>mgfgy3>7}G?wX#O!iY|$tm2&!+a}hEW)#Y<Za4+aFs!>Q)qq{0
zt*@-tDoL`CiOFz2f!<b8Bi_7`ug8_@_?{Tr4!^Z4_BLXP>ez2`^Y_;tPTZfUE$+0O
zdoJ+tKy~b8043U=#=CxvcWnh8$&Z8EbGPd8&mcCLe%N`xvo`+2^yc(Vvafo*(b8I-
zZX}wk6MJpSR_CMZ_3lf*$o1}#$I0Ec$$OD?X-|%Bq&I>ar1oZQW%KRY8{4t-yK<%>
zr=QAa>+;#!&8^<e!mixckdsg4_PX3&YpLm*T~Fl9iy&&B;$F%qmfBAB?L;qBNB5$M
zjn;4TwV`{rtD_)lJ3UyB4_3#2kGD5cN<DRcyE*eh5?TV)DTs@wzFYccsdjcJ)>|C|
z;p^wVn%RrD{YPnu&f0K2(Yy8KZsO9q2s+kF8&~Qv<%!(=mw=M*9zc0fMxruYF6`>?
z!F9j^Im0IQALsSpCqxF>egGyaUs<+FWdmO&7r|tg&S{0|xxjJUGZgoJk!L7$AfDlR
HytuysYC@uL

literal 0
HcmV?d00001

diff --git a/utils/__pycache__/getdeviceevents.cpython-313.pyc b/utils/__pycache__/getdeviceevents.cpython-313.pyc
index 3b24f9449b6e03d2f73ede3b655726b88c0a20a0..a7fc47120640b6378923c88b1fc28fff7e1a299f 100644
GIT binary patch
delta 19
ZcmX>iengz>GcPX}0}!y>*~qnv8vr*61vmfz

delta 19
ZcmX>iengz>GcPX}0}yPxu#syQHvl^M1>OJv

diff --git a/utils/allowlist.py b/utils/allowlist.py
new file mode 100644
index 0000000..c8bbbdb
--- /dev/null
+++ b/utils/allowlist.py
@@ -0,0 +1,33 @@
+import datetime
+import requests
+import json
+import os
+
+def allowlistexechistories(url): 
+    endpoint = url + '/v1/group'
+    print("[+] Grabbing All Policies")
+    payload = {}
+    headers = {
+        "X-APIKey": os.getenv('APIKEY')
+    }
+    response = requests.request("POST", endpoint, headers=headers, data=payload, verify=False)
+    parse_text = json.loads(response.text)
+    policiesnames = []
+    policyids = []
+    for index, list in enumerate(parse_text['response']['groups'], start=1):
+        print(f"{index}. {list['name']}")
+        policiesnames.append(list['name'])
+        policyids.append(list['groupid'])
+    choice = input("Select Policy Group: ")
+    choice = int(choice) - 1
+    endpoint = url + '/v1/logging/exechistories'
+    payload_dict = {
+        "type":[1,2,6,7],
+        "policy": [policiesnames[choice]]
+    }
+    payload = json.dumps(payload_dict)
+    print(payload)
+    response = requests.request("POST", endpoint, headers=headers, data=payload, verify=False)
+    parse_text = json.loads(response.text)
+    for item in parse_text['response']['exechistories']:
+        print(item['checkpoint'])
\ No newline at end of file
-- 
2.34.1