reputation_results.html

{% extends 'widgets/widget_template.html' %}
{% load custom_template %}

{% block custom_title_prop %}{% if title_logo %}style="background-size: auto 60%; background-position: 50%; background-repeat: no-repeat; background-image: url('/app_resource/{{ title_logo }}');"{% endif %}{% endblock %}
{% block title1 %}{{ title1 }}{% endblock %}
{% block title2 %}{{ title2 }}{% endblock %}
{% block custom_tools %}
{% endblock %}

{% block widget_content %} <!-- Main Start Block -->

<!-- File: reputation_results.html

Copyright (c) Recorded Future, Inc, 2019-2024

This unpublished material is proprietary to Recorded Future. All
rights reserved. The methods and techniques described herein are
considered trade secrets and/or confidential. Reproduction or
distribution, in whole or in part, is forbidden except by express
written permission of Recorded Future.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under
the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
either express or implied. See the License for the specific language governing permissions
and limitations under the License.
-->

<!--
Style elements are defined in a separate file, named below,
and will be merged during compilation:
       recordedfuture_style.css          -->
<style>

  /*  ||  RECORDED FUTURE COLOR */

  :root{
    --RecordedFutureBlue: #2673B3;
    --CriticalityHigh: #cf0a2c;
    --CriticalityModerate: #FFCE00;
    --CriticalityLow: #e1e6eb;
  }

  a:hover {
    text-decoration: underline;
  }

  .rf-widget {
    overflow: auto;
    width: 100%;
    height: 100%;
    padding-left:10px;
    padding-right:10px;
  }

  .rf-box {
    width: 750px;
    padding: 5px;
    margin: 0 5px;
    font-size: 12px;
  }

  .highlighted {
    font-weight: 700;
  }

  .non-highlighted {
    font-size: x-small;
  }

  .rf-box th {
    text-align: left;
  }

  .rf-table {
    width: 98%;
    border-collapse: collapse;
    margin: 5px 5px 5px 0;
    padding: 10px;
    font-size: 12px;
  }

  td.rf-criticality-level-3, td.rf-criticality-level-4,
  td.rf-criticality-level-5 {
    background: var(--CriticalityHigh);
    width: 0 !important;
    padding: 0 2px 0 3px !important;
  }
  td.rf-criticality-level-2 {
    background: var(--CriticalityModerate);
    width: 0 !important;
    padding: 0 2px 0 3px !important;
  }
  td.rf-criticality-level-1 {
    background: var(--CriticalityLow);
    width: 0 !important;
    padding: 0 2px 0 3px !important;
  }

  .rf-table td {
    vertical-align: text-top;
    padding: 10px;
  }

  td.rf-timestamp {
    min-width: 13ex !important;
  }

  .rf-hover-info {
    font-weight: normal;
  }

  .rf-hover-info:hover {
    font-weight: bold;
  }
  .rf-full-width-box {
    width: 100%;
    border-bottom: 1px solid #3c444d;
    padding: 5px;
    margin: 0 5px;
    font-size: 12px;
  }
  .rf-circle {
    height: 10px;
    width: 10px;
    border-radius: 50%;
  }
  .rf-alert-panel {
    width: 96%;
    margin-left: 2%;
    border: 1px solid #3c444d;
    padding: 10px;
  }
  .rf-chip-box {
    border-radius: 10px;
    background-color: darkred;
    padding: 3px;
    text-align: center;
  }
  .rf-priority-level-High {
    background: var(--CriticalityHigh);
  }
  .rf-priority-level-Moderate {
    background: var(--CriticalityModerate);
  }
  .rf-priority-level-Informational {
    background: var(--CriticalityLow);
  }
  .rf-criticality-level-High {
    background: var(--CriticalityHigh);
  }
  .rf-criticality-level-Medium {
    background: var(--CriticalityModerate);
  }
  .rf-criticality-level-Low {
    background: var(--CriticalityLow);
  }
  .rf-playbook-alert-screenshot {
    margin-bottom: 20px;
    width: 100%;
    height: 720px;
  }
  .rf-playbook-alert-data-row {
    display: flex;
    align-items: center;
    margin: 0;
    gap: 20px;
    margin-bottom: 5px;
  }
  .rf-playbook-alert-dns-data-row {
    display: flex;
    align-items: center;
    margin: 0;
    gap: 5px;
  }
  .rf-playbook-alert-panel-title {
    margin-left: 2%;
  }
  .rf-playbook-alert-whois-data-row {
    display: flex;
    align-items: center;
    gap: 20px;
  }
  .rf-playbook-alert-data-row-title {
    width: 10%;
  }
  .rf-playbook-alert-evidence-data-row-title {
    width: 20%;
  }
</style>

<div class="rf-widget">
  <!-- Main Div -->
  {% for result in results %} <!-- loop for each result -->

    <!------------------- For each Result ---------------------->

    {% if result.data %} <!-- else case will handle errors and no data found responses -->
    <!-- Overview -->
    <div class="rf-box">
      <table class="rf-table">
        <tr>
          <td colspan="3">{% if result.param.domain %}
            <span class="non-highlighted">Domain Reputation</span> <br/>
            <a href="javascript:;" onclick="context_menu(this, [{'contains': ['domain'], 'value': '{{ result.param.domain }}' }], 0, {{ container.id }}, null, false);">{{ result.param.domain }}&nbsp;<span class="fa fa-caret-down" style="font-size: smaller;"></span></a>
            {% elif result.param.ip %}
            <span class="non-highlighted">IP Reputation</span> <br/>
            <a href="javascript:;" onclick="context_menu(this, [{'contains': ['ip'], 'value': '{{ result.param.ip }}' }], 0, {{ container.id }}, null, false);">{{ result.param.ip }}&nbsp;<span class="fa fa-caret-down" style="font-size: smaller;"></span></a>
            {% elif result.param.hash %}
            <span class="non-highlighted">Hash Reputation</span> <br/>
            <a href="javascript:;" onclick="context_menu(this, [{'contains': ['hash'], 'value': '{{ result.param.hash }}' }], 0, {{ container.id }}, null, false);">{{ result.param.hash }}&nbsp;<span class="fa fa-caret-down" style="font-size: smaller;"></span></a>
            {% elif result.param.url %}
            <span class="non-highlighted">URL Reputation</span> <br/>
            <a href="javascript:;" onclick="context_menu(this, [{'contains': ['url'], 'value': '{{ result.param.url }}' }], 0, {{ container.id }}, null, false);">{{ result.param.url }}&nbsp;<span class="fa fa-caret-down" style="font-size: smaller;"></span></a>
            {% elif result.param.vulnerability %}
            <span class="non-highlighted">Vulnerability Reputation</span> <br/>
            <a href="javascript:;" onclick="context_menu(this, [{'contains': ['vulnerability'], 'value': '{{ result.param.vulnerability }}' }], 0, {{ container.id }}, null, false);">{{ result.param.vulnerability }}&nbsp;<span class="fa fa-caret-down" style="font-size: smaller;"></span></a>
            {% endif %}
          </td>
        </tr>
        <tr>
          <td><span class="non-highlighted">Risk Score</span> <br/>
            {{ result.data.riskscore }}</td>
          <td>
            <span class="non-highlighted">Number of triggered Risk Rules</span><br/>
            {{ result.data.rulecount }} of {{ result.data.maxrules }} rules triggered</td>
          <td>
            <span class="non-highlighted">Intelligence Card</span> <br/>
            {% if result.data.intelCard %}
              <a href="{{ result.data.intelCard }}" target="new">Open</a>
            {% elif result.intelCard %}
              <a href="{{ result.intelCard }}" target="new">Open</a>
            {% endif %}
          </td>
        </tr>
      </table>
    </div>

      <!-- NVD CVSS -->
      {% if result.data.description %}
      <div class="rf-box">
        <table class="rf-table">
          <tr>
            <td>
              <span class="non-highlighted">NVD Vulnerability
                Description</span><br/>
              {{ result.data.description }}
            </td>
          </tr>
        </table>
      </div>
      {% endif %}

      <!-- Risk Rules Triggered -->
      {% if result.data.evidence %}
      <div class="rf-box">
        <table class="rf-table">
          <tr><td colspan="4">Risk Rules Triggered</td></tr>
          {% for rule in result.data.evidence|dictsortreversed:"level" %}
            <tr>
              <td class="rf-criticality-level-{{ rule.level }}"></td>
              <td><span class="non-highlighted">Risk Rule</span> <br/>
                {{ rule.rule }}
              </td>
              <td><span class="non-highlighted">Evidence</span> <br/>
                {{ rule.description }}
              </td>
              <td>
                <span class="non-highlighted">Timestamp</span> <br/>
                <span title="{{ rule.timestamp }}">
                  {{ rule.timestamp|slice:"0:10" }}
                </span>
              </td>
            </tr>
          {% endfor %}
        </table>
      </div>
      {% endif %}

    {% else %} <!-- handle no data responses -->
      <table class="rf-table">
        <tr>
          <th>Status</th>
          <th>Message</th>
        </tr>
        <tr>
          <td>{{ result.status }}</td>
          <td>{{ result.message }}</td>
        </tr>
      </table>
    {% endif %}

  <!------------------- For each Result END ---------------------->
  {% endfor %} <!-- loop for each result end -->
</div> <!-- Main Div -->

{% endblock %} <!-- Main Start Block -->