Actions¶

class orion_notebook.graph.enums.actions.Actions(value)¶

Bases: enum.Enum

Enum of possible actions applicable to events

Allow = 0¶

AllowByUser = 8¶

AllowFGW = 28¶

AllowSWAuthorized = 29¶

AllowSonGWInstaller = 18¶

AllowWL = 3¶

Block = 1¶

BlockBL = 4¶

BlockExploit = 14¶

BlockTimeout = 2¶

BlockURL = 12¶

Delete = 6¶

Disinfect = 5¶

EmbebedBlocked = 20¶

EmbebedInformed = 19¶

ExploitAllowByAdmin = 31¶

ExploitAllowByUser = 15¶

ExploitInformed = 17¶

IPBlocked = 32¶

InformNewPE = 30¶

Informed = 9¶

KillProcess = 13¶

Quarantine = 7¶

RebootNeeded = 16¶

Rename = 11¶

SuspendProcess = 21¶

UncertainAction = 26¶

Unknown = -1¶

Unquarantine = 10¶

orion_notebook.graph.enums.actions.is_action_blocked(action_id: int) → bool¶

Checks if the action passed as parameter is a block action (has been blocked)

Parameters: action_id (int) – The action id to check if its a block action
Returns: If the action is a block action or not
Return type: bool