updated the connector

stix_shifter_modules/securonix/entry_point.py

@@ -1,17 +1,17 @@
 from stix_shifter_utils.utils.base_entry_point import BaseEntryPoint
 
 
-class EntryPoint(BaseEntryPoint):
+class EntryPoint ( BaseEntryPoint ) :
 
-    def __init__(self, connection={}, configuration={}, options={}):
-        super().__init__(connection, configuration, options)
-        self.set_async(True)
+    def __init__ ( self , connection={} , configuration={} , options={} ) :
+        super ( ).__init__ ( connection , configuration , options )
+        self.set_async ( True )
 
-        if connection:
-            self.setup_transmission_basic(connection, configuration)
+        if connection :
+            self.setup_transmission_basic ( connection , configuration )
 
-        self.add_dialect('default', default=True)
+        self.add_dialect ( 'default' , default = True )
 
-    def get_translated_queries(self, data, query, options={}):
+    def get_translated_queries ( self , data , query , options={} ) :
         # This returns the raw query, bypassing the STIX parsing
-        return [query]
+        return [ query ]

stix_shifter_modules/securonix/stix_translation/json/from_stix_map.json

@@ -1,17 +1,61 @@
 {
-  "x-oca-event": {
-    "fields": {
-      "action": ["action"],
-      "description": ["description"],
-      "category": ["category"],
-      "severity": ["severity"],
-      "created": ["eventtime"],
-       "user_ref.account_login": ["username"]
+    "x-oca-event": {
+        "fields": {
+            "action": ["action"],
+            "description": ["description"],
+            "category": ["category"],
+            "severity": ["severity"],
+            "created": ["eventtime"],
+            "user_ref.account_login" : ["username"],
+            "timeline_by_month": ["timeline_by_month"],
+            "rg_timezoneoffset": ["rg_timezoneoffset"],
+            "resourcegroupname": ["resourcegroupname"],
+            "eventid": ["eventid"],
+             "ipaddress": ["ipaddress"],
+             "week": ["week"],
+            "year": ["year"],
+             "accountresourcekey": ["accountresourcekey"],
+            "resourcehostname": ["resourcehostname"],
+             "sourceprocessname": ["sourceprocessname"],
+            "rg_functionality": ["rg_functionality"],
+             "userid": ["userid"],
+              "customfield2": ["customfield2"],
+             "dayofmonth": ["dayofmonth"],
+              "jobid": ["jobid"],
+             "resourcegroupid": ["resourcegroupid"],
+            "datetime": ["datetime"],
+              "timeline_by_hour": ["timeline_by_hour"],
+             "collectiontimestamp": ["collectiontimestamp"],
+             "hour": ["hour"],
+            "accountname": ["accountname"],
+            "tenantid": ["tenantid"],
+            "id": ["id"],
+             "rg_resourcetypeid": ["rg_resourcetypeid"],
+             "_indexed_at_tdt": ["_indexed_at_tdt"],
+            "timeline_by_minute": ["timeline_by_minute"],
+          "routekey": ["routekey"],
+            "collectionmethod": ["collectionmethod"],
+            "receivedtime": ["receivedtime"],
+             "publishedtime": ["publishedtime"],
+              "categorizedtime": ["categorizedtime"],
+             "jobstarttime": ["jobstarttime"],
+              "dayofyear": ["dayofyear"],
+            "minute": ["minute"],
+            "categoryseverity": ["categoryseverity"],
+            "rg_vendor": ["rg_vendor"],
+             "month": ["month"],
+             "version": ["version"],
+             "timeline": ["timeline"],
+             "dayofweek": ["dayofweek"],
+             "timeline_by_week": ["timeline_by_week"],
+            "tenantname": ["tenantname"],
+            "resourcename": ["resourcename"],
+              "ingestionnodeid": ["ingestionnodeid"]
+        }
+    },
+    "ipv4-addr": {
+         "fields": {
+             "value": ["sourceip", "destinationip"]
+         }
     }
-  },
- "ipv4-addr": {
-    "fields": {
-      "value": ["sourceip", "destinationip"]
-    }
-  }
 }