From bdc943105da4cee658478709303b54af5634a8ea Mon Sep 17 00:00:00 2001 From: andrew-kline <65789862+andrew-kline@users.noreply.github.com> Date: Wed, 12 Jun 2024 08:21:40 -0700 Subject: [PATCH] Add run_all_insights to analyze message function (#36) * feat: add run_all_insights to analyze message function * chore: version bump --------- Co-authored-by: Andrew Kline --- setup.py | 2 +- src/sublime/api.py | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/setup.py b/setup.py index ebb9812..034c1b7 100755 --- a/setup.py +++ b/setup.py @@ -34,7 +34,7 @@ def read(fname): setup( name="sublime-cli", - version="0.0.30", + version="0.0.31", description="Abstraction to interact with the Sublime API.", url="https://sublimesecurity.com/", author="Sublime Security", diff --git a/src/sublime/api.py b/src/sublime/api.py index 12c0013..3988c8e 100644 --- a/src/sublime/api.py +++ b/src/sublime/api.py @@ -197,7 +197,7 @@ def create_message(self, raw_message, mailbox_email_address=None, message_type=N response, _ = self._request(endpoint, request_type='POST', json=body) return response - def analyze_message(self, raw_message, rules, queries, run_all_detection_rules=False, run_active_detection_rules=False): + def analyze_message(self, raw_message, rules, queries, run_all_detection_rules=False, run_active_detection_rules=False, run_all_insights=False): """Analyze a Message Data Model against a list of rules or queries. :param raw_message: Base64 encoded raw message @@ -211,6 +211,8 @@ def analyze_message(self, raw_message, rules, queries, run_all_detection_rules=F :type run_all_detection_rules: bool :param run_active_detection_rules: whether to run active detection rules against the given message :type run_active_detection_rules: bool + :param run_all_insights: whether to run all insight queries against the given message + :type run_all_insights: bool """ @@ -222,6 +224,7 @@ def analyze_message(self, raw_message, rules, queries, run_all_detection_rules=F "queries": queries, "run_all_detection_rules": run_all_detection_rules, "run_active_detection_rules": run_active_detection_rules, + "run_all_insights": run_all_insights, } endpoint = self._EP_MESSAGES_ANALYZE