Changes between Version 1 and Version 2 of UseCaseUC3PrototypeImplementation

Timestamp:

08/23/26 19:50:46 (4 days ago)

Author:

231118

Comment:

--

UseCaseUC3PrototypeImplementation

@@ -28 +28 @@
 
 {{{
-SELECT
-    id,
-    name,
-    user,
-    ip,
-    os,
-    first_seen,
-    last_seen
+SELECT id, name, user, ip, os, first_seen, last_seen
 FROM computers
-WHERE name='Ilina-laptop';
+WHERE tenant_id = 1 AND name = 'Ilina-laptop';
 }}}
 
@@ -51 +44 @@
 
 {{{
-SELECT
-    pid,
-    name,
-    cpu_percent,
-    memory_mb,
-    username
+SELECT pid, name, cpu_percent, memory_mb, username
 FROM computer_processes_current
-WHERE computer_id =
-(
-    SELECT id
-    FROM computers
-    WHERE name='Ilina-laptop'
-)
+WHERE computer_id = (SELECT id FROM computers WHERE tenant_id = 1 AND name = 'Ilina-laptop')
 ORDER BY cpu_percent DESC;
 }}}
@@ -80 +63 @@
 
 {{{
-SELECT
-    event_type,
-    message,
-    severity,
-    timestamp
+SELECT event_id, event_type, message, timestamp
 FROM sysmon_events
-WHERE computer_id =
-(
-    SELECT id
-    FROM computers
-    WHERE name='Ilina-laptop'
-)
+WHERE computer_id = (SELECT id FROM computers WHERE tenant_id = 1 AND name = 'Ilina-laptop')
 ORDER BY timestamp DESC;
 }}}
@@ -108 +82 @@
 
 {{{
-SELECT
-    protocol,
-    local_ip,
-    local_port,
-    remote_ip,
-    remote_port,
-    state
+SELECT pid, local_address, remote_address, status, process_name, timestamp
 FROM network_connections
-WHERE computer_id =
-(
-    SELECT id
-    FROM computers
-    WHERE name='Ilina-laptop'
-);
+WHERE computer_id = (SELECT id FROM computers WHERE tenant_id = 1 AND name = 'Ilina-laptop');
 }}}
 
 [[Image(UC3_step4.png,700px)]]
+
+----
+
+=== Чекор 5 ===
+
+'''Систем'''
+
+Ги прикажува безбедносните аларми за компјутерот.
+
+'''SQL'''
+
+{{{
+SELECT alert_type, severity, description, resolved, timestamp
+FROM security_alerts
+WHERE computer_id = (SELECT id FROM computers WHERE tenant_id = 1 AND name = 'Ilina-laptop')
+ORDER BY timestamp DESC;
+}}}