Merge pull request #1211 from aheuze/update_get_alert_case

Get cases with get alert action
SEKOIA-IO · Dec 11, 2024 · 2947fce · 2947fce
2 parents 69bfe00 + 5a45e6c
commit 2947fce
Show file tree

Hide file tree

Showing 3 changed files with 31 additions and 1 deletion.
diff --git a/Sekoia.io/action_get_an_alert.json b/Sekoia.io/action_get_an_alert.json
@@ -15,6 +15,12 @@
       "stix": {
         "in": "query",
         "type": "boolean"
+      },
+      "cases": {
+        "in": "query",
+        "type": "boolean",
+        "description": "Get the cases associated with this alert",
+        "default": false
       }
     },
     "required": [
@@ -714,6 +720,29 @@
       },
       "target": {
         "type": "string"
+      },
+      "cases": {
+        "type": "array",
+        "items": {
+          "type": "object",
+          "properties": {
+            "short_id": {
+              "type": "string"
+            },
+            "name": {
+              "type": "string"
+            },
+            "is_supplied": {
+              "type": "boolean"
+            },
+            "manual": {
+              "type": "boolean"
+            },
+            "status": {
+              "type": "string"
+            }
+          }
+        }
       }
     }
   }

diff --git a/Sekoia.io/sekoiaio/operation_center/__init__.py b/Sekoia.io/sekoiaio/operation_center/__init__.py
@@ -123,7 +123,7 @@
     {
         "verb": "get",
         "endpoint": base_url + "alerts/{uuid}",
-        "query_parameters": ["stix"],
+        "query_parameters": ["stix", "cases"],
     },
 )
 

diff --git a/Sekoia.io/tests/test_operation_center.py b/Sekoia.io/tests/test_operation_center.py
@@ -38,6 +38,7 @@ def test_get_alert_success():
     expected_response = {
         "community_uuid": "string",
         "countermeasures": [],
+        "cases": [],
         "updated_at": 0,
         "source": "string",
         "updated_by_type": "string",