Fix model for incidents field of reports

This commit is contained in:
Peter Annabel 2025-07-28 15:00:23 -05:00
parent 084206c86d
commit b58c1d6810
3 changed files with 11 additions and 4 deletions

View File

@ -1,6 +1,6 @@
[project] [project]
name = "pyhuntress" name = "pyhuntress"
version = "0.1.1" version = "0.2.2"
authors = [ authors = [
{ name="Peter Annabel", email="peter.annabel@gmail.com" }, { name="Peter Annabel", email="peter.annabel@gmail.com" },
] ]
@ -27,11 +27,15 @@ keywords = [
] ]
license = "GPL-3.0-only" license = "GPL-3.0-only"
license-files = ["LICEN[CS]E*"] license-files = ["LICEN[CS]E*"]
dynamic = ["dependencies"]
[project.urls] [project.urls]
Homepage = "https://github.com/brygphilomena/pyhuntress" Homepage = "https://github.com/brygphilomena/pyhuntress"
Issues = "https://github.com/brygphilomena/pyhuntress/issues" Issues = "https://github.com/brygphilomena/pyhuntress/issues"
[build-system] [build-system]
requires = ["hatchling >= 1.26"] requires = ["hatchling >= 1.26", "hatch-requirements-txt"]
build-backend = "hatchling.build" build-backend = "hatchling.build"
[tool.hatch.metadata.hooks.requirements_txt]
files = ["requirements.txt"]

3
requirements.txt Normal file
View File

@ -0,0 +1,3 @@
requests==2.32.4
pydantic==2.11.7
typing_extensions==4.14.1

View File

@ -237,7 +237,7 @@ class SIEMReports(HuntressModel):
ransomware_note: str | None = Field(default=None, alias="RansomwareNote") ransomware_note: str | None = Field(default=None, alias="RansomwareNote")
# Huntress has incident_log listed as "complex" with the note "A JSON representation of any critical # Huntress has incident_log listed as "complex" with the note "A JSON representation of any critical
# or high severity incidents from this report" # or high severity incidents from this report"
incident_log: str | None = Field(default=None, alias="IncidentLog") incident_log: list[dict[str, Any]] | None = Field(default=None, alias="IncidentLog")
total_mav_detection_count: int | None = Field(default=None, alias="TotalMAVDetectionCount") total_mav_detection_count: int | None = Field(default=None, alias="TotalMAVDetectionCount")
blocked_malware_count: int | None = Field(default=None, alias="BlockedMalwareCount") blocked_malware_count: int | None = Field(default=None, alias="BlockedMalwareCount")
investigated_mav_detection_count: int | None = Field(default=None, alias="InvestigatedMAVDetectionCount") investigated_mav_detection_count: int | None = Field(default=None, alias="InvestigatedMAVDetectionCount")