• abc.ABC
  • msiempy.core.types.NitroObject - Base class for all nitro objects. All objects have a reference to the single msiempy.core.session.NitroSession object that handle the esm requests. Creates the object session.
    • msiempy.core.types.NitroDict - Dict-Like object (Base class) to represent SIEM data. Exemple : Event, Alarm, etc...
      • msiempy.Alarm - Dict-Like object. Represents a triggered alarm.
      • msiempy.DataSource - Dict-Like object.
      • msiempy.Event - Dict-Like object. Represents an event in the SIEM.
        • msiempy.GroupedEvent - Dict-Like object. Represents a row of grouped query results.
      • msiempy.Watchlist - Dict-Like object. Represent a ESM Watchlist.
    • msiempy.core.types.NitroList - Base class for list objects.
      • msiempy.core.query.FilteredQueryList - Abstract base class that provide time range handling and define the query filters.
        • msiempy.AlarmManager - List-Like object. Interface to query and manage alarms.
        • msiempy.event._QueryExecuteManager - Abstract class to handle common filters properties that grouped and non-grouped queries share.
          • msiempy.EventManager - List-Like object. Interface to execute a event query.
          • msiempy.GroupedEventManager - List-Like object. Interface to execute a grouped event query.
      • msiempy.DevTree - List-Like object. ESM device tree interface.
      • msiempy.WatchlistManager - List-Like object. Summary of ESM watchlists.
    • msiempy.ESM - Enterprise Security Manager interface.
• collections.UserDict
  • msiempy.core.types.NitroDict - Dict-Like object (Base class) to represent SIEM data. Exemple : Event, Alarm, etc...
    • msiempy.Alarm - Dict-Like object. Represents a triggered alarm.
    • msiempy.DataSource - Dict-Like object.
    • msiempy.Event - Dict-Like object. Represents an event in the SIEM.
      • msiempy.GroupedEvent - Dict-Like object. Represents a row of grouped query results.
    • msiempy.Watchlist - Dict-Like object. Represent a ESM Watchlist.
  • msiempy.event._QueryFilter - Base class for all SIEM query objects in order to dump the filter as dict.
    • msiempy.FieldFilter - Query field filter
    • msiempy.GroupFilter - Query group filter
• collections.UserList
  • msiempy.core.types.NitroList - Base class for list objects.
    • msiempy.core.query.FilteredQueryList - Abstract base class that provide time range handling and define the query filters.
      • msiempy.AlarmManager - List-Like object. Interface to query and manage alarms.
      • msiempy.event._QueryExecuteManager - Abstract class to handle common filters properties that grouped and non-grouped queries share.
        • msiempy.EventManager - List-Like object. Interface to execute a event query.
        • msiempy.GroupedEventManager - List-Like object. Interface to execute a grouped event query.
    • msiempy.DevTree - List-Like object. ESM device tree interface.
    • msiempy.WatchlistManager - List-Like object. Summary of ESM watchlists.
• configparser.ConfigParser
  • msiempy.NitroConfig - configparser.ConfigParser parser object.
• Exception
  • msiempy.NitroError - Base ESM exception. It's used when the user/passwd is incorrect and other HTTP errors.
• json.JSONEncoder
  • msiempy.core.types.NitroObject.NitroJSONEncoder - Custom JSON encoder that will use the approprtiate propertie depending of the type of NitroObject. TODO support json json dumping of QueryFilers, may be by making them inherits from NitroDict.
• msiempy.NitroSession - Single session handler and HTTP interface. The session object will handle authentication and intermittent (but annoying) SIEM errors.