update

AGENTS/agent_threat_intelligence.py

@@ -127,17 +127,3 @@ class GraphAgent(LanggraphPlaybook):
         result = final_state['messages'][-1].content
         logger.info(f"Query result extracted, result length: {len(result)} characters")
         return result
-
-
-# Test code
-if __name__ == "__main__":
-    import os
-    import django
-
-    os.environ.setdefault("DJANGO_SETTINGS_MODULE", "ASP.settings")
-    django.setup()
-
-    print("\n--- Using create_agent for Query ---")
-    test_query = "最近5分钟192.168.1.150使用ssh访问了哪些内网主机?"
-    result_simple = AgentThreatIntelligence.threat_intelligence_lookup("ip", "66.240.205.34")
-    print(result_simple)

PLUGINS/SIEM/registry.py

@@ -28,7 +28,7 @@ def _load_yaml_configs() -> Dict[str, IndexInfo]:
 
     script_path = Path(__file__).resolve()
     project_root = script_path.parents[2]
-    indexs_dir = project_root / "DATA" / "Indexes"
+    indexs_dir = project_root / "DATA" / "Plugin_SIEM_Indexes"
 
     if not indexs_dir.exists():
         return registry

PLUGINS/SIRP/sirpmodel.py

@@ -274,13 +274,13 @@ class CasePriority(StrEnum):
 
 
 class CaseStatus(StrEnum):
-    UNKNOWN = "Unknown"
+    # UNKNOWN = "Unknown"
     NEW = "New"
     IN_PROGRESS = "In Progress"
     ON_HOLD = "On Hold"
     RESOLVED = "Resolved"
     CLOSED = "Closed"
-    OTHER = "Other"
+    # OTHER = "Other"
 
 
 class CaseVerdict(StrEnum):