A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
MAX_STREAM_RESULTS_SIZE_KB
config optioninstall_dependencies.py
script.logging
module in an app, and the log
messages will be displayed in the playbook editorget devices by fields
allows you to
query the devices database.walkoff.see.InterfaceSseStream
and walkoff.sse.FilteredInterfaceSseStream
objects have been made available to use in custom interfaces.CaseLogger
object which makes it much easier to log events to the case
database has been created.interfaces.AppBlueprint
used to construct interfaces has been modified
to extend from walkoff.sse.StreamableBlueprint
which in turn extends
Flask's Blueprint. This makes the interface cleaner and more flexible.workflow_path
, logging_config_file
, and zmq_requests
have been
removed from the APIwalkoff.helpers.create_sse_event
has been deprecated and will be removed in
version 0.10.0. Use walkoff.sse.SseEvent
or the streams in walkoff.sse
instead
.requirements-test.txt
Introducing Conditional Expressions for complete control over conditions, Execution Control to monitor and control running workflows, performance improvements, and an improved REST API.
workflowqueue
which is
available through the /api/workflowqueue
endpoints.GET /api/playbooks?mode=export
and the POST /api/playbooks
using a
multipart/form-data
body respectively./api/workflows
endpoints
rather than the /api/playbooks
endpoints/api/playbooks
and the /api/workflows
endpoints now use the UUID
instead of the name./api/playbook/{id}/copy
and the
/api/playbooks/{id}/workflows/{id}/copy
endpoints are now accessed
through POST /api/playbooks?source={id_to_copy}
and the
POST /api/workflows?source={id_to_copy}
endpoints respectively./api/streams
endpointson_xyz_event
decorators is now an alias for "sender_ids". This will be removed in
version 0.9.0
/api/playbooks/{name}/workflows/{name}/save
endpoint has been removed./api/playbooks/{name}/workflows/{name}/{execute/pause/resume}
endpoints
have been removed. Use the /api/workflowqueue
resource insteadworkflow_version
from the playbooks. This may be added later to
provide backwards-compatible import functionality to the workflows./api/devices/import
and /api/devices/export
endpoints have been
removed. Use the new POST /api/devices
with multipart/form-data
and
GET /api/devices?mode=export
endpoints respectively.