agentic-soc-platform/backend/apps/artifacts/migrations/0001_initial.py

# Generated by Django 6.0.6 on 2026-06-28 04:14

import uuid
from django.db import migrations, models


class Migration(migrations.Migration):

    initial = True

    dependencies = [
    ]

    operations = [
        migrations.CreateModel(
            name='Artifact',
            fields=[
                ('id', models.UUIDField(default=uuid.uuid4, editable=False, primary_key=True, serialize=False)),
                ('created_at', models.DateTimeField(auto_now_add=True)),
                ('updated_at', models.DateTimeField(auto_now=True)),
                ('artifact_id', models.CharField(blank=True, db_index=True, default='', editable=False, help_text='Record ID e.g. artifact_000001 (记录 ID e.g. artifact_000001)', max_length=32, unique=True)),
                ('name', models.CharField(blank=True, choices=[('Unknown', 'Unknown'), ('Other', 'Other'), ('Source', 'Source'), ('Destination', 'Destination'), ('Client', 'Client'), ('Server', 'Server'), ('Actor', 'Actor'), ('Target', 'Target'), ('Affected', 'Affected'), ('Related', 'Related'), ('Observed', 'Observed'), ('Request', 'Request'), ('Response', 'Response'), ('Source IP', 'Source IP'), ('Destination IP', 'Destination IP'), ('Client IP', 'Client IP'), ('Server IP', 'Server IP'), ('Remote IP', 'Remote IP'), ('Local IP', 'Local IP'), ('NAT IP', 'NAT IP'), ('Proxy IP', 'Proxy IP'), ('Forwarded IP', 'Forwarded IP'), ('DNS Server IP', 'DNS Server IP'), ('DHCP Server IP', 'DHCP Server IP'), ('VPN IP', 'VPN IP'), ('Source Port', 'Source Port'), ('Destination Port', 'Destination Port'), ('Client Port', 'Client Port'), ('Server Port', 'Server Port'), ('Source MAC', 'Source MAC'), ('Destination MAC', 'Destination MAC'), ('Device MAC', 'Device MAC'), ('Domain', 'Domain'), ('Source Domain', 'Source Domain'), ('Destination Domain', 'Destination Domain'), ('Request Domain', 'Request Domain'), ('DNS Query Name', 'DNS Query Name'), ('DNS Answer', 'DNS Answer'), ('DNS Record', 'DNS Record'), ('URL', 'URL'), ('Request URL', 'Request URL'), ('Referrer URL', 'Referrer URL'), ('Redirect URL', 'Redirect URL'), ('Landing URL', 'Landing URL'), ('Phishing URL', 'Phishing URL'), ('Callback URL', 'Callback URL'), ('Download URL', 'Download URL'), ('HTTP Method', 'HTTP Method'), ('HTTP User-Agent', 'HTTP User-Agent'), ('HTTP Host', 'HTTP Host'), ('HTTP Path', 'HTTP Path'), ('HTTP Query', 'HTTP Query'), ('HTTP Status Code', 'HTTP Status Code'), ('HTTP Request Body', 'HTTP Request Body'), ('HTTP Response Body', 'HTTP Response Body'), ('User', 'User'), ('User Name', 'User Name'), ('User ID', 'User ID'), ('User SID', 'User SID'), ('User UPN', 'User UPN'), ('User Email', 'User Email'), ('Source User', 'Source User'), ('Destination User', 'Destination User'), ('Actor User', 'Actor User'), ('Target User', 'Target User'), ('Affected User', 'Affected User'), ('Executing User', 'Executing User'), ('Logon User', 'Logon User'), ('Login User', 'Login User'), ('Principal User', 'Principal User'), ('Initiating User', 'Initiating User'), ('Requesting User', 'Requesting User'), ('Owner User', 'Owner User'), ('Account', 'Account'), ('Account ID', 'Account ID'), ('Account Name', 'Account Name'), ('Service Account', 'Service Account'), ('Admin Account', 'Admin Account'), ('Cloud Account', 'Cloud Account'), ('AWS Account ID', 'AWS Account ID'), ('Azure Tenant ID', 'Azure Tenant ID'), ('Azure Subscription ID', 'Azure Subscription ID'), ('GCP Project ID', 'GCP Project ID'), ('Credential ID', 'Credential ID'), ('Access Key ID', 'Access Key ID'), ('API Key ID', 'API Key ID'), ('Token ID', 'Token ID'), ('Session ID', 'Session ID'), ('Host', 'Host'), ('Hostname', 'Hostname'), ('Host ID', 'Host ID'), ('Source Host', 'Source Host'), ('Destination Host', 'Destination Host'), ('Affected Host', 'Affected Host'), ('Target Host', 'Target Host'), ('Device', 'Device'), ('Device ID', 'Device ID'), ('Device Name', 'Device Name'), ('Endpoint', 'Endpoint'), ('Endpoint ID', 'Endpoint ID'), ('Asset ID', 'Asset ID'), ('Agent ID', 'Agent ID'), ('Sensor ID', 'Sensor ID'), ('Operating System', 'Operating System'), ('Host OS', 'Host OS'), ('Host IP', 'Host IP'), ('Host MAC', 'Host MAC'), ('Host Serial Number', 'Host Serial Number'), ('Process', 'Process'), ('Process Name', 'Process Name'), ('Process ID', 'Process ID'), ('Process Path', 'Process Path'), ('Process Executable', 'Process Executable'), ('Process Command Line', 'Process Command Line'), ('Process Hash', 'Process Hash'), ('Parent Process', 'Parent Process'), ('Parent Process Name', 'Parent Process Name'), ('Parent Process ID', 'Parent Process ID'), ('Parent Process Path', 'Parent Process Path'), ('Parent Process Command Line', 'Parent Process Command Line'), ('Parent Process Hash', 'Parent Process Hash'), ('Child Process', 'Child Process'), ('Child Process Name', 'Child Process Name'), ('Child Process ID', 'Child Process ID'), ('Child Process Command Line', 'Child Process Command Line'), ('Acting Process', 'Acting Process'), ('Target Process', 'Target Process'), ('Injected Process', 'Injected Process'), ('File', 'File'), ('File Name', 'File Name'), ('File Path', 'File Path'), ('File Extension', 'File Extension'), ('File Directory', 'File Directory'), ('File Size', 'File Size'), ('File Hash', 'File Hash'), ('File MD5', 'File MD5'), ('File SHA1', 'File SHA1'), ('File SHA256', 'File SHA256'), ('File SHA512', 'File SHA512'), ('File Imphash', 'File Imphash'), ('File Signature', 'File Signature'), ('File Publisher', 'File Publisher'), ('File Owner', 'File Owner'), ('Download File', 'Download File'), ('Attachment File', 'Attachment File'), ('Dropped File', 'Dropped File'), ('Target File', 'Target File'), ('Email', 'Email'), ('Sender Email', 'Sender Email'), ('Recipient Email', 'Recipient Email'), ('CC Email', 'CC Email'), ('BCC Email', 'BCC Email'), ('Reply-To Email', 'Reply-To Email'), ('Return-Path Email', 'Return-Path Email'), ('Mail From', 'Mail From'), ('Mail To', 'Mail To'), ('Mail Subject', 'Mail Subject'), ('Mail Message ID', 'Mail Message ID'), ('Mail Attachment', 'Mail Attachment'), ('Mail URL', 'Mail URL'), ('Mail Domain', 'Mail Domain'), ('Sender Domain', 'Sender Domain'), ('Recipient Domain', 'Recipient Domain'), ('Cloud Resource', 'Cloud Resource'), ('Cloud Resource ID', 'Cloud Resource ID'), ('Cloud Resource Name', 'Cloud Resource Name'), ('Cloud Resource ARN', 'Cloud Resource ARN'), ('Cloud Region', 'Cloud Region'), ('Cloud Zone', 'Cloud Zone'), ('Cloud Service', 'Cloud Service'), ('Cloud Role', 'Cloud Role'), ('Cloud Policy', 'Cloud Policy'), ('Cloud Policy ARN', 'Cloud Policy ARN'), ('Cloud Instance ID', 'Cloud Instance ID'), ('Cloud Bucket', 'Cloud Bucket'), ('Cloud Storage Object', 'Cloud Storage Object'), ('Cloud Function', 'Cloud Function'), ('CloudTrail Event ID', 'CloudTrail Event ID'), ('Cloud Request ID', 'Cloud Request ID'), ('IAM User', 'IAM User'), ('IAM Role', 'IAM Role'), ('IAM Group', 'IAM Group'), ('IAM Policy', 'IAM Policy'), ('IAM Policy ARN', 'IAM Policy ARN'), ('IAM Permission', 'IAM Permission'), ('IAM Action', 'IAM Action'), ('IAM Resource', 'IAM Resource'), ('Assumed Role', 'Assumed Role'), ('Access Key', 'Access Key'), ('Secret Key ID', 'Secret Key ID'), ('Permission Set', 'Permission Set'), ('Registry Key', 'Registry Key'), ('Registry Value', 'Registry Value'), ('Registry Path', 'Registry Path'), ('Registry Data', 'Registry Data'), ('Windows Service', 'Windows Service'), ('Scheduled Task', 'Scheduled Task'), ('WMI Object', 'WMI Object'), ('COM Object', 'COM Object'), ('Named Pipe', 'Named Pipe'), ('Mutex', 'Mutex'), ('Container', 'Container'), ('Container ID', 'Container ID'), ('Container Name', 'Container Name'), ('Container Image', 'Container Image'), ('Container Image ID', 'Container Image ID'), ('Pod', 'Pod'), ('Pod Name', 'Pod Name'), ('Namespace', 'Namespace'), ('Kubernetes Cluster', 'Kubernetes Cluster'), ('Kubernetes Node', 'Kubernetes Node'), ('Kubernetes Service Account', 'Kubernetes Service Account'), ('CVE', 'CVE'), ('CWE', 'CWE'), ('CPE', 'CPE'), ('CVSS Score', 'CVSS Score'), ('Vulnerable Product', 'Vulnerable Product'), ('Malware Name', 'Malware Name'), ('Malware Family', 'Malware Family'), ('Threat Actor', 'Threat Actor'), ('Threat Campaign', 'Threat Campaign'), ('Attack Technique', 'Attack Technique'), ('Attack Tactic', 'Attack Tactic'), ('IOC', 'IOC'), ('YARA Rule', 'YARA Rule'), ('Sigma Rule', 'Sigma Rule')], default='Unknown', help_text='Artifact name (实体名称)', max_length=100)),
                ('type', models.CharField(choices=[('Unknown', 'Unknown'), ('Hostname', 'Hostname'), ('IP Address', 'IP Address'), ('MAC Address', 'MAC Address'), ('User Name', 'User Name'), ('Email Address', 'Email Address'), ('URL String', 'URL String'), ('File Name', 'File Name'), ('Hash', 'Hash'), ('Process Name', 'Process Name'), ('Resource UID', 'Resource UID'), ('Port', 'Port'), ('Subnet', 'Subnet'), ('Command Line', 'Command Line'), ('Country', 'Country'), ('Process ID', 'Process ID'), ('HTTP User-Agent', 'HTTP User-Agent'), ('CWE', 'CWE'), ('CVE', 'CVE'), ('User Credential ID', 'User Credential ID'), ('Endpoint', 'Endpoint'), ('User', 'User'), ('Email', 'Email'), ('Uniform Resource Locator', 'Uniform Resource Locator'), ('File', 'File'), ('Process', 'Process'), ('Geo Location', 'Geo Location'), ('Container', 'Container'), ('Registry', 'Registry'), ('Fingerprint', 'Fingerprint'), ('Group', 'Group'), ('Account', 'Account'), ('Script Content', 'Script Content'), ('Serial Number', 'Serial Number'), ('Resource', 'Resource'), ('Message', 'Message'), ('Advisory', 'Advisory'), ('File Path', 'File Path'), ('Device', 'Device'), ('Registry Path', 'Registry Path'), ('Other', 'Other')], default='Unknown', help_text='Artifact type (实体类型)', max_length=50)),
                ('role', models.CharField(choices=[('Unknown', 'Unknown'), ('Target', 'Target'), ('Actor', 'Actor'), ('Affected', 'Affected'), ('Related', 'Related'), ('Other', 'Other')], default='Unknown', help_text='Artifact role in event (实体在事件中的角色)', max_length=20)),
                ('value', models.CharField(blank=True, default='', help_text='Artifact value (实体值)', max_length=500)),
            ],
            options={
                'db_table': 'artifacts',
                'ordering': ['-created_at'],
            },
        ),
    ]