diff --git a/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructure.py b/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructure.py index 558c2818..95ebc464 100644 --- a/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructure.py +++ b/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructure.py @@ -287,7 +287,7 @@ def configure_imported_roles( return except Exception as e: self.pbar.write( - f"The follwoing roles do not exist:'{enterprise_security_roles}: {str(e)}" + f"The following role(s) do not exist:'{enterprise_security_roles}: {str(e)}" ) self.get_conn().roles.post( diff --git a/contentctl/objects/detection_tags.py b/contentctl/objects/detection_tags.py index d57b38f0..71925a22 100644 --- a/contentctl/objects/detection_tags.py +++ b/contentctl/objects/detection_tags.py @@ -23,7 +23,6 @@ from contentctl.objects.mitre_attack_enrichment import MitreAttackEnrichment from contentctl.objects.constants import ATTACK_TACTICS_KILLCHAIN_MAPPING from contentctl.objects.observable import Observable -from contentctl.objects.enums import Cis18Value, AssetType, SecurityDomain, RiskSeverity, KillChainPhase, NistCategory, SecurityContentProductName from contentctl.objects.enums import ( Cis18Value, AssetType, diff --git a/contentctl/objects/enums.py b/contentctl/objects/enums.py index 6d4cb12e..74d3ee7d 100644 --- a/contentctl/objects/enums.py +++ b/contentctl/objects/enums.py @@ -410,13 +410,13 @@ class NistCategory(str, enum.Enum): class RiskSeverity(str,enum.Enum): # Levels taken from the following documentation link # https://docs.splunk.com/Documentation/ES/7.3.2/User/RiskScoring - # 20 - Info (0-20 for us) - # 40 - Low (21-40 for us) - # 60 - Medium (41-60 for us) - # 80 - High (61-80 for us) - # 100 - Critical (81 - 100 for us) - INFO = "Info" - LOW = "Low" - MEDIUM = "Medium" - HIGH = "High" - CRITICAL = "Critical" + # 20 - info (0-20 for us) + # 40 - low (21-40 for us) + # 60 - medium (41-60 for us) + # 80 - high (61-80 for us) + # 100 - critical (81 - 100 for us) + INFO = "info" + LOW = "low" + MEDIUM = "medium" + HIGH = "high" + CRITICAL = "critical"