diff --git a/PLUGINS/SIRP/correlation.py b/Lib/correlation.py similarity index 100% rename from PLUGINS/SIRP/correlation.py rename to Lib/correlation.py diff --git a/MODULES/Cloud-01-AWS-IAM-Privilege-Escalation-via-AttachUserPolicy.py b/MODULES/Cloud-01-AWS-IAM-Privilege-Escalation-via-AttachUserPolicy.py index 39a0232..fe942a4 100644 --- a/MODULES/Cloud-01-AWS-IAM-Privilege-Escalation-via-AttachUserPolicy.py +++ b/MODULES/Cloud-01-AWS-IAM-Privilege-Escalation-via-AttachUserPolicy.py @@ -5,7 +5,7 @@ from dateutil import parser from Lib.basemodule import BaseModule from PLUGINS.CMDB.tools import lookup_cmdb_context_tool -from PLUGINS.SIRP.correlation import Correlation +from Lib.correlation import Correlation from PLUGINS.SIRP.sirpapi import Alert, Case from PLUGINS.SIRP.sirpcoremodel import ArtifactName, ArtifactType, ArtifactRole, Severity, Impact, Disposition, AlertAction, Confidence, AlertAnalyticType, \ ProductCategory, \ diff --git a/MODULES/EDR-01-HOST-Vssadmin-Delete-Shadows.py b/MODULES/EDR-01-HOST-Vssadmin-Delete-Shadows.py index 045a5ca..6c0b636 100644 --- a/MODULES/EDR-01-HOST-Vssadmin-Delete-Shadows.py +++ b/MODULES/EDR-01-HOST-Vssadmin-Delete-Shadows.py @@ -4,7 +4,7 @@ from typing import List from dateutil import parser from Lib.basemodule import BaseModule -from PLUGINS.SIRP.correlation import Correlation +from Lib.correlation import Correlation from PLUGINS.SIRP.sirpapi import Alert, Case from PLUGINS.SIRP.sirpcoremodel import ArtifactName, ArtifactType, ArtifactRole, Severity, Impact, Disposition, AlertAction, Confidence, AlertAnalyticType, ProductCategory, \ AlertPolicyType, AlertRiskLevel, AlertStatus, CasePriority, ArtifactModel, AlertModel, CaseModel diff --git a/MODULES/Mail-01-User-Report-Phishing-Mail.py b/MODULES/Mail-01-User-Report-Phishing-Mail.py index b78804d..f51f52b 100644 --- a/MODULES/Mail-01-User-Report-Phishing-Mail.py +++ b/MODULES/Mail-01-User-Report-Phishing-Mail.py @@ -7,7 +7,7 @@ from typing import List, Optional from dateutil import parser from Lib.basemodule import BaseModule -from PLUGINS.SIRP.correlation import Correlation +from Lib.correlation import Correlation from PLUGINS.SIRP.sirpapi import Alert, Case from PLUGINS.SIRP.sirpcoremodel import ( ArtifactName,