models

type BrowserSession struct {
	ID        int64  // TODO Need to use random, non-repeating numbers for the ID
	NonceHash []byte // Random value to avoid session hijacking, since the session ID really should be at least 128-bits
	UserID    int64  // Ties this back to the user that logged in

	CreationDate int64  // For expiration purposes
	LastActive   int64  // Need to keep track of this so we don't log the user out while they are doing something
	IP           []byte // Keep track of where this was originally logged in from
	UserAgent    []byte // Keep track of what browser was used to login with
}

type CatalogFile struct {
	ID int64

	// This data comes from the client
	FilePath  string
	Sha256    []byte
	Size      int
	FirstSeen int64 // Time first seen anywhere

	UploadDate int64 // 0 if we don't have a copy

	//
	// Data inserted by worker
	//
	AnalysisDate int64 // 0 if we haven't analyzed it yet
	SignerID     int64
}

type CertificateTrustList struct {
	CatalogID int64
	Hash      []byte
	HashType  string // sha1, md5, or sha256
	FileID    int64  // Will be 0 until a match is found
}

type Customer struct {
	ID   int64  // Internal ID for the DB
	UUID []byte // Customer ID the client knows

	Active       bool // In case we want to disable the customer
	CreationDate int64
}

type ExecutableFile struct {
	ID int64

	//
	// This data comes from the client
	//
	// File hashes
	Md5    []byte
	Sha1   []byte
	Sha256 []byte

	CodeSectionSha256 []byte // TODO
	Size              int    // Size in bytes
	IsSigned          bool
	FirstSeen         int64 // Time first seen anywhere
	ExecutionType     int   // 1 = exe, 2 = dll, 4 = sys

	UploadDate int64 // 0 if we don't have a copy

	//
	// Data inserted by worker
	//
	AnalysisDate int64 // 0 if we haven't analyzed it yet

	// Authenticode hashes
	AuthenticodeMd5    []byte
	AuthenticodeSha1   []byte
	AuthenticodeSha256 []byte

	// Resource info
	CompanyName      string
	ProductVersion   string
	ProductName      string
	FileDescription  string
	InternalName     string
	FileVersion      string
	OriginalFilename string

	Architecture int // TODO 32, 64, or 1 (arm)
}

type FileToCounterSignerMap struct {
	FileID    int64
	Timestamp int64
	SignerID  int64
}

type FileToSignerMap struct {
	FileID   int64 // one
	SignerID int64 // many
}

type FileToSystemMap struct {
	FileID   int64 // TODO Need to set unique on (FileID, SystemID)
	SystemID int64
	FilePath string // TODO MAYBE Normalize and match this up with ProcessEvent
	// FilePath is the path where it was last seen
	FirstSeen int64
	LastSeen  int64
}

type PasswordReset struct {
	ID     int64
	Nonce  []byte // Random value 256-bit value
	UserID int64  // Ties this back to the user that logged in

	CreationDate int64 // For expiration purposes
	Valid        bool  // Set to zero after first use so this can't be re-used
}

type ProcessEvent struct {
	ID               int64
	SystemID         int64
	ExecutableFileID int64
	PID              int64
	PPID             int64
	FilePath         string // TODO MAYBE Normalize into own table
	CommandLine      string // TODO MAYBE Normalize into own table
	EventTime        int64
	State            int
}

type Rule struct {
	ID             int64
	Description    string
	AttributeType  string
	AttributeValue string
	AllowDeny      bool // Allow = true, Deny = false

	NextRule     int64
	PreviousRule int64
}

type RuleSet struct {
	ID        int64
	FirstRule int64
}

type Signer struct {
	ID                               int64
	Version                          int
	Subject                          string
	SubjectShortName                 string
	SerialNumber                     []byte
	DigestAlgorithm                  string
	DigestEncryptionAlgorithm        string
	DigestEncryptionAlgorithmKeySize int
	IssuerID                         int64 // Parent in trust chain
}

type System struct {
	ID           int64
	SystemSetID  int64
	SystemUUID   []byte // ID given to the agent
	AgentVersion string
	Comment      string // User defined name

	OSHumanName  string
	OSVersion    string // Can't call this Version or things break
	Manufacturer string
	Model        string
	MachineGUID  string // From  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGUID
	Arch         string
	MachineName  string

	FirstSeen int64
	LastSeen  int64
}

type SystemSet struct {
	ID         int64
	CustomerID int64
	Name       string
	RuleSetID  int64

	Mode int // 0 = Monitor, 1 = Enforce rules
	// One day other modes such as enforce but allow via prompt
	SystemSetID int64 // Allows recursion

	CreationDate int64
}

type Task struct {
	ID                  int64
	SystemID            int64
	CreationDate        int64
	DeployedToAgentDate int64
	Command             string
}

type Updates struct {
	ID          int64
	VersionFrom string
	VersionTo   string
}

type User struct {
	ID           int64
	CustomerID   int64
	FirstName    string
	LastName     string
	Email        string // Used for both login and contacting
	PasswordHash []byte // PasswordHash (bcrypt hash, so it includes a salt)

	Verified                   bool  // True when the user has verified their email
	Active                     bool  // In case we want to disable the user
	MustSetPassword            bool  // True when the user needs to set their password (from password resets)
	LastPasswordResetEmailDate int64 // Last time we sent them a password reset email, so we don't flood them
	CreationDate               int64
	LastLogin                  int64
}