Added support for all curated rule set actions

CLI.md

@@ -569,6 +569,63 @@ secops rule test --file "/path/to/rule.yaral" --time-window 24 > udm_events.json
 
 The `rule test` command outputs UDM events as pure JSON objects that can be piped to a file or processed by other tools. This makes it easy to integrate with other systems or perform additional analysis on the events.
 
+### Curated Rule Set Management
+
+List all curated rules:
+```bash
+secops curated-rule rule list
+```
+Get curated rules:
+```bash
+# Get rule by UUID
+curated-rule rule get --id "ur_ttp_GCP_ServiceAPIDisable"
+
+# Get rule by name
+curated-rule rule get --name "GCP Service API Disable"
+
+```
+
+List all curated rule sets:
+```bash
+secops curated-rule rule-set list
+```
+
+Get specific curated rule set details:
+```bash
+# Get curated rule set by UUID
+secops curated-rule rule-set get --id "f5533b66-9327-9880-93e6-75a738ac2345"
+```
+
+List all curated rule set categories:
+```bash
+secops curated-rule rule-set-category list
+```
+
+Get specific curated rule set category details:
+```bash
+# Get curated rule set category by UUID
+secops curated-rule rule-set-category get --id "db1114d4-569b-5f5d-0fb4-f65aaa766c92"
+```
+
+List all curated rule set deployments:
+```bash
+secops curated-rule rule-set-deployment list
+```
+
+Get specific curated rule set deployment details:
+```bash
+# Get curated rule set deployment by UUID
+secops curated-rule rule-set-deployment get --id "f5533b66-9327-9880-93e6-75a738ac2345"
+
+# Get curated rule set deployment by name
+secops curated-rule rule-set-deployment get --name "Active Breach Priority Host Indicators"
+```
+
+Update curated rule set deployment:
+```bash
+secops curated-rule rule-set-deployment update --category-id "db1114d4-569b-5f5d-0fb4-f65aaa766c92" --rule-set-id "7e52cd71-03c6-97d2-ffcb-b8d7159e08e1" --precision precise --enabled false --alerting false
+```
+
 ### Alert Management
 
 Get alerts:

README.md

@@ -1712,11 +1712,82 @@ for rule_alert in alerts_response.get('ruleAlerts', []):
 
 If `tooManyAlerts` is True in the response, consider narrowing your search criteria using a smaller time window or more specific filters.
 
-### Rule Sets
+### Curated Rule Sets
 
-Manage curated rule sets:
+Query curated rules:
 
 ```python
+# List all curated rules
+rules = chronicle.list_curated_rules()
+for rule in rules:
+    rule_id = rule.get("name", "").split("/")[-1]
+    display_name = rule.get("description")
+    description = rule.get("description")
+    print(f"Rule: {display_name}, Description: {description}")
+
+# Get a curated rule
+rule = chronicle.get_curated_rule("ur_ttp_lol_Atbroker")
+
+# Get a curated rule set by display name
+# NOTE: This is a linear scan of all curated rules which may be inefficient for large rule sets.
+rule_set = chronicle.get_curated_rule_by_name("Atbroker.exe Abuse")
+```
+
+Query curated rule sets:
+
+```python
+# List all curated rule sets
+rule_sets = chronicle.list_curated_rule_sets()
+for rule_set in rule_sets:
+    rule_set_id = rule_set.get("name", "").split("/")[-1]
+    display_name = rule_set.get("displayName")
+    print(f"Rule Set: {display_name}, ID: {rule_set_id}")
+
+# Get a curated rule set by ID
+rule_set = chronicle.get_curated_rule_set("00ad672e-ebb3-0dd1-2a4d-99bd7c5e5f93")
+```
+
+Query curated rule set categories:
+
+```python
+# List all curated rule set categories
+rule_set_categories = chronicle.list_curated_rule_set_categories()
+for rule_set_category in rule_set_categories:
+    rule_set_category_id = rule_set_category.get("name", "").split("/")[-1]
+    display_name = rule_set_category.get("displayName")
+    print(f"Rule Set Category: {display_name}, ID: {rule_set_category_id}")
+
+# Get a curated rule set category by ID
+rule_set_category = chronicle.get_curated_rule_set_category("110fa43d-7165-2355-1985-a63b7cdf90e8")
+```
+
+Manage curated rule set deployments (turn alerting on or off (either precise or broad) for curated rule sets):
+
+```python
+# List all curated rule set deployments
+rule_set_deployments = chronicle.list_curated_rule_set_deployments()
+for rs_deployment in rule_set_deployments:
+    rule_set_id = rs_deployment.get("name", "").split("/")[-3]
+    category_id = rs_deployment.get("name", "").split("/")[-5]
+    deployment_status = rs_deployment.get("name", "").split("/")[-1]
+    display_name = rs_deployment.get("displayName")
+    alerting = rs_deployment.get("alerting", False)
+    print(
+        f"Rule Set: {display_name},"
+        f"Rule Set ID: {rule_set_id}",
+        f"Category ID: {category_id}",
+        f"Precision: {deployment_status}",
+        f"Alerting: {alerting}",
+    )
+
+# Get curated rule set deployment by ID
+rule_set_deployment = chronicle.get_curated_rule_set_deployment("00ad672e-ebb3-0dd1-2a4d-99bd7c5e5f93")
+
+# Get curated rule set deployment by rule set display name
+# NOTE: This is a linear scan of all curated rules which may be inefficient for large rule sets.
+rule_set_deployment = chronicle.get_curated_rule_set_deployment_by_name("Azure - Network")
+
+# Update multiple curated rule set deployments
 # Define deployments for rule sets
 deployments = [
     {
@@ -1728,8 +1799,17 @@ deployments = [
     }
 ]
 
-# Update rule set deployments
 chronicle.batch_update_curated_rule_set_deployments(deployments)
+
+# Update a single curated rule set deployment
+chronicle.update_curated_rule_set_deployment(
+    category_id="category-uuid",
+    rule_set_id="ruleset-uuid",
+    precision="broad",
+    enabled=True,
+    alerting=False
+)
+
 ```
 
 ### Rule Validation

api_module_mapping.md

@@ -84,15 +84,17 @@ Following shows mapping between SecOps [REST Resource](https://cloud.google.com/
 |bigQueryAccess.provide                                                        |v1alpha|                                                            |                                       |
 |bigQueryExport.provision                                                      |v1alpha|                                                            |                                       |
 |cases.countPriorities                                                         |v1alpha|                                                            |                                       |
-|curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments.batchUpdate|v1alpha|chronicle.rule_set.batch_update_curated_rule_set_deployments|                                       |
-|curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments.patch      |v1alpha|                                                            |                                       |
-|curatedRuleSetCategories.curatedRuleSets.get                                  |v1alpha|                                                            |                                       |
-|curatedRuleSetCategories.curatedRuleSets.list                                 |v1alpha|                                                            |                                       |
-|curatedRuleSetCategories.get                                                  |v1alpha|                                                            |                                       |
-|curatedRuleSetCategories.list                                                 |v1alpha|                                                            |                                       |
-|curatedRules.get                                                              |v1alpha|                                                            |                                       |
-|curatedRules.list                                                             |v1alpha|                                                            |                                       |
-|dashboardCharts.batchGet                                                      |v1alpha|                                                            |                                       |
+|curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments.batchUpdate | v1alpha | chronicle.rule_set.batch_update_curated_rule_set_deployments                                                      |                                                |
+| curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments.patch       | v1alpha | chronicle.rule_set.update_curated_rule_set_deployment                                                             | secops curated-rule rule-set-deployment update |
+| curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments.list        | v1alpha | chronicle.rule_set.list_curated_rule_set_deployments                                                              | secops curated-rule rule-set-deployment list   |
+| curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments.get         | v1alpha | chronicle.rule_set.get_curated_rule_set_deployment<br/>chronicle.rule_set.get_curated_rule_set_deployment_by_name | secops curated-rule rule-set-deployment get    |
+| curatedRuleSetCategories.curatedRuleSets.get                                   | v1alpha | chronicle.rule_set.get_curated_rule_set                                                                           | secops curated-rule rule-set get               |
+| curatedRuleSetCategories.curatedRuleSets.list                                  | v1alpha | chronicle.rule_set.list_curated_rule_sets                                                                         | secops curated-rule rule-set list              |
+| curatedRuleSetCategories.get                                                   | v1alpha | chronicle.rule_set.get_curated_rule_set_category                                                                  | secops curated-rule rule-set-category get      |
+| curatedRuleSetCategories.list                                                  | v1alpha | chronicle.rule_set.list_curated_rule_set_categories                                                               | secops curated-rule rule-set-category list     |
+| curatedRules.get                                                               | v1alpha | chronicle.rule_set.get_curated_rule<br/>chronicle.rule_set.get_curated_rule_by_name                               | secops curated-rule rule get                   |
+| curatedRules.list                                                              | v1alpha | chronicle.rule_set.list_curated_rules                                                                             | secops curated-rule rule list                  |
+| dashboardCharts.batchGet                                                      |v1alpha|                                                            |                                       |
 |dashboardCharts.get                                                |v1alpha|chronicle.dashboard.get_chart                                                              |secops dashboard get-chart                                       |
 |dashboardQueries.execute                                                      |v1alpha|chronicle.dashboard_query.execute_query                                                            |secops dashboard-query execute                                       |
 |dashboardQueries.get                                                          |v1alpha|chronicle.dashboard_query.get_execute_query                                                            |secops dashboard-query get                                       |