Datapath/pyhuntress
2
0
Fork 0
mirror of https://github.com/brygphilomena/pyhuntress.git synced 2025-11-04 16:27:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix top_incident_hosts model

Browse Source
This commit is contained in:
Peter Annabel 2025-07-28 15:14:15 -05:00
parent b58c1d6810
commit 9e7f76e8b2
2 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pyproject.toml
View File

@ -1,6 +1,6 @@
[project]
name = "pyhuntress"
version = "0.2.2"
version = "0.2.3"
authors = [
{ name="Peter Annabel", email="peter.annabel@gmail.com" },
]

4
src/pyhuntress/models/siem/__init__.py
View File

@ -224,7 +224,7 @@ class SIEMReports(HuntressModel):
incident_product_counts: dict[str, int] | None = Field(default=None, alias="IncidentProductCounts")
incident_indicator_counts: dict[str, int] | None = Field(default=None, alias="IncidentIndicatorCounts")
top_incident_av_threats: list | None = Field(default=None, alias="TopIncidentAVThreats")
top_incident_hosts: dict[str, Any] | None = Field(default=None, alias="TopIncidentHosts")
top_incident_hosts: list | None = Field(default=None, alias="TopIncidentHosts")
potential_threat_indicators: int | None = Field(default=None, alias="PotentialThreatIndicators")
agents_count: int | None = Field(default=None, alias="AgentsCount")
deployed_canaries_count: int | None = Field(default=None, alias="DeployedCanariesCount")
@ -235,8 +235,6 @@ class SIEMReports(HuntressModel):
analyst_note: str | None = Field(default=None, alias="AnalystNote")
global_threats_note: str | None = Field(default=None, alias="GlobalThreatsNote")
ransomware_note: str | None = Field(default=None, alias="RansomwareNote")
# Huntress has incident_log listed as "complex" with the note "A JSON representation of any critical
# or high severity incidents from this report"
incident_log: list[dict[str, Any]] | None = Field(default=None, alias="IncidentLog")
total_mav_detection_count: int | None = Field(default=None, alias="TotalMAVDetectionCount")
blocked_malware_count: int | None = Field(default=None, alias="BlockedMalwareCount")