Valid actor, risk and tunnel types are defined in import-data-utils.js:
const actorTypes = { UNKNOWN: 0b00001, DESKTOP: 0b00010, HEADLESS: 0b00100, IOT: 0b01000, MOBILE: 0b10000 }; const riskTypes = { UNKNOWN: 0b000001, CALLBACK_PROXY: 0b000010, GEO_MISMATCH: 0b000100, LOGIN_BRUTEFORCE: 0b001000, TUNNEL: 0b010000, WEB_SCRAPING: 0b100000 }; const tunnelTypes = { UNKNOWN: 0, VPN: 1, PROXY: 2 };
...based on Spur's documentation: https://docs.spur.us/#/data-types?id=data-types
We should log when we encounter an unknown type, in case these lists change over time.