oceans2alaska
610a3bb447
- Add privacy projection (core/privacy.py), private report storage, bounded
process capture; omit identities, free text and unapproved paths
- Mask remote peer IPs: only loopback/host/wildcard stay numeric, others are
reduced to remote_scope private/public (schema + scoring updated)
- Map ss TCP states to canonical names; ASCII-only numeric fields; fix
"Microsoft Visual C++" product matching (Python and PowerShell)
- Merge 7fed3b9: -Diagnostic switch, serialization exit code 3, PS7 module
path, UI error detail; keep hardened task/certificate collectors
- Add audit docs, privacy docs and regression tests
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
552 lines
13 KiB
JSON
552 lines
13 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"title": "Samsara inventory v1",
|
|
"type": "object",
|
|
"required": [
|
|
"schema_version",
|
|
"synthetic",
|
|
"collected_at",
|
|
"server",
|
|
"checks",
|
|
"inventory"
|
|
],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"schema_version": {
|
|
"const": "1.0"
|
|
},
|
|
"synthetic": {
|
|
"type": "boolean"
|
|
},
|
|
"collected_at": {
|
|
"type": "string",
|
|
"format": "date-time",
|
|
"maxLength": 8192
|
|
},
|
|
"server": {
|
|
"type": "object",
|
|
"required": [
|
|
"hostname"
|
|
],
|
|
"properties": {
|
|
"hostname": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"platform": {
|
|
"enum": [
|
|
"windows",
|
|
"linux"
|
|
]
|
|
},
|
|
"operating_system": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"os_version": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"os_build": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"kernel_version": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"collection_source": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"domain": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"product_type": {
|
|
"type": "integer"
|
|
},
|
|
"domain_joined": {
|
|
"type": [
|
|
"boolean",
|
|
"null"
|
|
]
|
|
},
|
|
"ip_addresses": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"network_adapters": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"last_boot": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"checks": {
|
|
"type": "object",
|
|
"additionalProperties": {
|
|
"type": "object",
|
|
"required": [
|
|
"status",
|
|
"message"
|
|
],
|
|
"properties": {
|
|
"status": {
|
|
"enum": [
|
|
"complete",
|
|
"partial",
|
|
"failed",
|
|
"not_collected"
|
|
]
|
|
},
|
|
"message": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"started_at": {
|
|
"type": "string",
|
|
"format": "date-time",
|
|
"maxLength": 8192
|
|
},
|
|
"completed_at": {
|
|
"type": "string",
|
|
"format": "date-time",
|
|
"maxLength": 8192
|
|
},
|
|
"errors": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"code",
|
|
"scope",
|
|
"message"
|
|
],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"code": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"scope": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"message": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
}
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"permission_limitations": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"limitations": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"maxItems": 20000
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"required": [
|
|
"roles",
|
|
"services",
|
|
"network",
|
|
"tasks",
|
|
"software",
|
|
"storage",
|
|
"certificates"
|
|
],
|
|
"maxProperties": 30
|
|
},
|
|
"inventory": {
|
|
"type": "object",
|
|
"required": [
|
|
"roles",
|
|
"services",
|
|
"network",
|
|
"tasks",
|
|
"software",
|
|
"storage",
|
|
"certificates"
|
|
],
|
|
"properties": {
|
|
"roles": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"name"
|
|
],
|
|
"properties": {
|
|
"name": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"display_name": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"state": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"feature_type": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"services": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"name",
|
|
"state"
|
|
],
|
|
"properties": {
|
|
"name": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"state": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"display_name": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"startup": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"account": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"pid": {
|
|
"type": "integer"
|
|
},
|
|
"arguments": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"executable": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"PathName": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"network": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"state",
|
|
"local_address",
|
|
"local_port",
|
|
"remote_address",
|
|
"remote_port"
|
|
],
|
|
"properties": {
|
|
"state": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"local_address": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"local_port": {
|
|
"type": "integer"
|
|
},
|
|
"remote_address": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"remote_port": {
|
|
"type": "integer"
|
|
},
|
|
"pid": {
|
|
"type": [
|
|
"integer",
|
|
"null"
|
|
],
|
|
"minimum": 0
|
|
},
|
|
"process": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"direction": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"remote_scope": {
|
|
"enum": [
|
|
"",
|
|
"loopback",
|
|
"host",
|
|
"unspecified",
|
|
"private",
|
|
"public"
|
|
]
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"tasks": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"name",
|
|
"enabled"
|
|
],
|
|
"properties": {
|
|
"name": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"enabled": {
|
|
"type": "boolean"
|
|
},
|
|
"path": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"account": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"triggers": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"state": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"executables": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"associated_unit": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"arguments": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"executable": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"PathName": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"software": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"name"
|
|
],
|
|
"properties": {
|
|
"name": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"publisher": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"version": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"installation_date": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"registry_view": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"storage": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"type",
|
|
"name",
|
|
"path"
|
|
],
|
|
"properties": {
|
|
"type": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"name": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"path": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"filesystem": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"special": {
|
|
"type": "boolean"
|
|
},
|
|
"capacity_gib": {
|
|
"type": [
|
|
"number",
|
|
"null"
|
|
]
|
|
},
|
|
"free_gib": {
|
|
"type": [
|
|
"number",
|
|
"null"
|
|
]
|
|
},
|
|
"observed_open_files": {
|
|
"type": "integer",
|
|
"minimum": 0
|
|
},
|
|
"observed_client_count": {
|
|
"type": "integer",
|
|
"minimum": 0
|
|
},
|
|
"activity_source": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"activity_observed_at": {
|
|
"type": "string",
|
|
"format": "date-time",
|
|
"maxLength": 8192
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"maxItems": 20000
|
|
},
|
|
"certificates": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"subject"
|
|
],
|
|
"properties": {
|
|
"subject": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"issuer": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"expires": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"thumbprint": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
},
|
|
"store": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"maxItems": 20000
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"privacy": {
|
|
"type": "object",
|
|
"additionalProperties": false,
|
|
"required": [
|
|
"profile",
|
|
"identities_omitted",
|
|
"paths",
|
|
"scope"
|
|
],
|
|
"properties": {
|
|
"profile": {
|
|
"const": "minimized-metadata-v1"
|
|
},
|
|
"identities_omitted": {
|
|
"const": true
|
|
},
|
|
"paths": {
|
|
"const": "approved-roots-only"
|
|
},
|
|
"scope": {
|
|
"type": "string",
|
|
"maxLength": 8192
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|