datadog

package
v0.2.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 23, 2026 License: Apache-2.0 Imports: 14 Imported by: 0

Documentation

Overview

Package datadog matches expected Datadog security signals.

Index

Constants

View Source
const QueryAllOpenSignals = `@workflow.triage.state:open`
View Source
const QueryOpenSignalsByAlertNameAndSeverity = `@workflow.triage.state:open @workflow.rule.name:"%s" %s`
View Source
const QuerySeverity = `status:%s`

Variables

This section is empty.

Functions

This section is empty.

Types

type DatadogAlertFilter

type DatadogAlertFilter struct {
	RuleName string `yaml:"rule-name"`
	Severity string
}

type DatadogAlertGeneratedAssertion

type DatadogAlertGeneratedAssertion struct {
	SignalsAPI  DatadogSecuritySignalsAPI
	AlertFilter *DatadogAlertFilter
}

func (*DatadogAlertGeneratedAssertion) AlertName

func (m *DatadogAlertGeneratedAssertion) AlertName() string

func (*DatadogAlertGeneratedAssertion) Cleanup

func (m *DatadogAlertGeneratedAssertion) Cleanup(indicators []string, logger *logrus.Entry) error

func (*DatadogAlertGeneratedAssertion) HasExpectedAlert

func (m *DatadogAlertGeneratedAssertion) HasExpectedAlert(indicators []string, logger *logrus.Entry) (bool, error)

func (*DatadogAlertGeneratedAssertion) MatcherName

func (m *DatadogAlertGeneratedAssertion) MatcherName() string

func (*DatadogAlertGeneratedAssertion) String

type DatadogAlertGeneratedAssertionBuilder

type DatadogAlertGeneratedAssertionBuilder struct {
	DatadogAlertGeneratedAssertion
}

builder

func DatadogSecuritySignal

func DatadogSecuritySignal(name string, envVars map[string]string) *DatadogAlertGeneratedAssertionBuilder

DatadogSecuritySignal creates a new Datadog security signal matcher. envVars provides run-specific env vars; pass nil to read from process env (CLI path).

func (*DatadogAlertGeneratedAssertionBuilder) Cleanup

func (m *DatadogAlertGeneratedAssertionBuilder) Cleanup(indicators []string, logger *logrus.Entry) error

func (*DatadogAlertGeneratedAssertionBuilder) HasExpectedAlert

func (m *DatadogAlertGeneratedAssertionBuilder) HasExpectedAlert(indicators []string, logger *logrus.Entry) (bool, error)

func (*DatadogAlertGeneratedAssertionBuilder) WithSeverity

type DatadogSecuritySignalsAPI

type DatadogSecuritySignalsAPI interface {
	SearchSignals(query string) ([]datadogV2.SecurityMonitoringSignal, error)
	CloseSignal(id string) error
}

type DatadogSecuritySignalsAPIImpl

type DatadogSecuritySignalsAPIImpl struct {
	// contains filtered or unexported fields
}

func (*DatadogSecuritySignalsAPIImpl) CloseSignal

func (m *DatadogSecuritySignalsAPIImpl) CloseSignal(id string) error

func (*DatadogSecuritySignalsAPIImpl) SearchSignals

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL