From 1ab1dbedb1d8248ddd89e76509498b9f50d8d9dd Mon Sep 17 00:00:00 2001
From: Itay Mizeretz <itay.mizeretz@guardicore.com>
Date: Tue, 9 Jan 2018 19:16:18 +0200
Subject: [PATCH] Add TelemetryFeed entrypoint + all logic

---
 monkey_island/cc/app.py                      |  2 +
 monkey_island/cc/resources/telemetry_feed.py | 85 ++++++++++++++++++++
 2 files changed, 87 insertions(+)
 create mode 100644 monkey_island/cc/resources/telemetry_feed.py

diff --git a/monkey_island/cc/app.py b/monkey_island/cc/app.py
index 6cfea1502..3990d1003 100644
--- a/monkey_island/cc/app.py
+++ b/monkey_island/cc/app.py
@@ -17,6 +17,7 @@ from cc.resources.edge import Edge
 from cc.resources.node import Node
 
 from cc.resources.root import Root
+from cc.resources.telemetry_feed import TelemetryFeed
 from cc.services.config import ConfigService
 
 __author__ = 'Barak'
@@ -88,5 +89,6 @@ def init_app(mongo_url):
     api.add_resource(NetMap, '/api/netmap', '/api/netmap/')
     api.add_resource(Edge, '/api/netmap/edge', '/api/netmap/edge/')
     api.add_resource(Node, '/api/netmap/node', '/api/netmap/node/')
+    api.add_resource(TelemetryFeed, '/api/telemetry-feed', '/api/telemetry-feed/')
 
     return app
diff --git a/monkey_island/cc/resources/telemetry_feed.py b/monkey_island/cc/resources/telemetry_feed.py
new file mode 100644
index 000000000..4c5e3b354
--- /dev/null
+++ b/monkey_island/cc/resources/telemetry_feed.py
@@ -0,0 +1,85 @@
+from datetime import datetime
+
+import dateutil
+import flask_restful
+from flask import request
+
+from cc.database import mongo
+from cc.services.node import NodeService
+
+__author__ = 'itay.mizeretz'
+
+
+class TelemetryFeed(flask_restful.Resource):
+    def get(self, **kw):
+        timestamp = request.args.get('timestamp')
+        if "null" == timestamp or timestamp is None:  # special case to avoid ugly JS code...
+            timestamp = datetime(2010,1,1).isoformat()
+
+        telemetries = mongo.db.telemetry.find({'timestamp': {'$gt': dateutil.parser.parse(timestamp)}})
+
+        return \
+            {
+                'telemetries': [TelemetryFeed.get_displayed_telemetry(telem) for telem in telemetries],
+                'timestamp': datetime.now().isoformat()
+            }
+
+    @staticmethod
+    def get_displayed_telemetry(telem):
+        return \
+            {
+                'id': telem['_id'],
+                'timestamp': telem['timestamp'].strftime('%d/%m/%Y %H:%M:%S'),
+                'hostname': NodeService.get_monkey_by_guid(telem['monkey_guid'])['hostname'],
+                'brief': TELEM_PROCESS_DICT[telem['telem_type']](telem)
+            }
+
+    @staticmethod
+    def get_tunnel_telem_brief(telem):
+        tunnel = telem['data']['proxy']
+        if tunnel is None:
+            return 'No tunnel is used.'
+        else:
+            tunnel_host_ip = tunnel.split(":")[-2].replace("//", "")
+            tunnel_host = NodeService.get_monkey_by_ip(tunnel_host_ip)['hostname']
+            return 'Tunnel set up to machine: %s.' % tunnel_host
+
+    @staticmethod
+    def get_state_telem_brief(telem):
+        if telem['data']['done']:
+            return 'Monkey died.'
+        else:
+            return 'Monkey started.'
+
+    @staticmethod
+    def get_exploit_telem_brief(telem):
+        target = telem['data']['machine']['ip_addr']
+        exploiter = telem['data']['exploiter']
+        result = telem['data']['result']
+        if result:
+            return 'Monkey successfully exploited %s using the %s exploiter.' % (target, exploiter)
+        else:
+            return 'Monkey failed exploiting %s using the %s exploiter.' % (target, exploiter)
+
+    @staticmethod
+    def get_scan_telem_brief(telem):
+        return 'Monkey discovered machine %s.' % telem['data']['machine']['ip_addr']
+
+    @staticmethod
+    def get_systeminfo_telem_brief(telem):
+        return 'Monkey collected system information.'
+
+    @staticmethod
+    def get_trace_telem_brief(telem):
+        return 'Monkey reached max depth.'
+
+
+TELEM_PROCESS_DICT = \
+    {
+        'tunnel': TelemetryFeed.get_tunnel_telem_brief,
+        'state': TelemetryFeed.get_state_telem_brief,
+        'exploit': TelemetryFeed.get_exploit_telem_brief,
+        'scan': TelemetryFeed.get_scan_telem_brief,
+        'system_info_collection': TelemetryFeed.get_systeminfo_telem_brief,
+        'trace': TelemetryFeed.get_trace_telem_brief
+    }