diff --git a/content/en/api/v2/security-monitoring/examples.json b/content/en/api/v2/security-monitoring/examples.json index 846c2935d95da..14e4b974ddd5d 100644 --- a/content/en/api/v2/security-monitoring/examples.json +++ b/content/en/api/v2/security-monitoring/examples.json @@ -5968,7 +5968,7 @@ "type": "signal_metadata" } }, - "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the updated triage attributes of the signal.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

Attributes describing a triage state update operation over a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_timestamp

\n
\n

int64

\n

Timestamp of the last edit to the comment.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,other

\n
\n \n
\n
\n
\n
\n
\n

assignee [required]

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

incident_ids [required]

\n
\n

[integer]

\n

Array of incidents that are associated with this signal.

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

state_update_timestamp

\n
\n

int64

\n

Timestamp of the last update to the signal state.

\n
\n \n
\n
\n
\n
\n
\n

state_update_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the updated triage attributes of the signal.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

Attributes describing a triage state update operation over a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_timestamp

\n
\n

int64

\n

Timestamp of the last edit to the comment.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,true_positive_benign,true_positive_malicious,other

\n
\n \n
\n
\n
\n
\n
\n

assignee [required]

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

incident_ids [required]

\n
\n

[integer]

\n

Array of incidents that are associated with this signal.

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

state_update_timestamp

\n
\n

int64

\n

Timestamp of the last update to the signal state.

\n
\n \n
\n
\n
\n
\n
\n

state_update_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" }, "400": { "json": { @@ -6069,7 +6069,7 @@ "type": "signal_metadata" } }, - "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the updated triage attributes of the signal.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

Attributes describing a triage state update operation over a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_timestamp

\n
\n

int64

\n

Timestamp of the last edit to the comment.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,other

\n
\n \n
\n
\n
\n
\n
\n

assignee [required]

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

incident_ids [required]

\n
\n

[integer]

\n

Array of incidents that are associated with this signal.

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

state_update_timestamp

\n
\n

int64

\n

Timestamp of the last update to the signal state.

\n
\n \n
\n
\n
\n
\n
\n

state_update_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the updated triage attributes of the signal.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

Attributes describing a triage state update operation over a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_timestamp

\n
\n

int64

\n

Timestamp of the last edit to the comment.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,true_positive_benign,true_positive_malicious,other

\n
\n \n
\n
\n
\n
\n
\n

assignee [required]

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

incident_ids [required]

\n
\n

[integer]

\n

Array of incidents that are associated with this signal.

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

state_update_timestamp

\n
\n

int64

\n

Timestamp of the last update to the signal state.

\n
\n \n
\n
\n
\n
\n
\n

state_update_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" }, "400": { "json": { @@ -6167,7 +6167,7 @@ "type": "signal_metadata" } }, - "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the updated triage attributes of the signal.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

Attributes describing a triage state update operation over a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_timestamp

\n
\n

int64

\n

Timestamp of the last edit to the comment.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,other

\n
\n \n
\n
\n
\n
\n
\n

assignee [required]

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

incident_ids [required]

\n
\n

[integer]

\n

Array of incidents that are associated with this signal.

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

state_update_timestamp

\n
\n

int64

\n

Timestamp of the last update to the signal state.

\n
\n \n
\n
\n
\n
\n
\n

state_update_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the updated triage attributes of the signal.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

Attributes describing a triage state update operation over a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_timestamp

\n
\n

int64

\n

Timestamp of the last edit to the comment.

\n
\n \n
\n
\n
\n
\n
\n

archive_comment_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,true_positive_benign,true_positive_malicious,other

\n
\n \n
\n
\n
\n
\n
\n

assignee [required]

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

incident_ids [required]

\n
\n

[integer]

\n

Array of incidents that are associated with this signal.

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

state_update_timestamp

\n
\n

int64

\n

Timestamp of the last update to the signal state.

\n
\n \n
\n
\n
\n
\n
\n

state_update_user

\n
\n

object

\n

Object representing a given user entity.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle for this user account.

\n
\n \n
\n
\n
\n
\n
\n

icon

\n
\n

string

\n

Gravatar icon associated to the user.

\n
\n \n
\n
\n
\n
\n
\n

id

\n
\n

int64

\n

Numerical ID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name for this user account.

\n
\n \n
\n
\n
\n
\n
\n

uuid [required]

\n
\n

string

\n

UUID assigned by Datadog to this user account.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" }, "400": { "json": { @@ -6222,7 +6222,7 @@ "type": "signal_metadata" } }, - "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the patch for changing the state of a signal.

\n
\n
\n
\n
\n
\n

attributes [required]

\n
\n

object

\n

Attributes describing the change of state of a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,other

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

version

\n
\n

int64

\n

Version of the updated signal. If server side version is higher, update will be rejected.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Data containing the patch for changing the state of a signal.

\n
\n
\n
\n
\n
\n

attributes [required]

\n
\n

object

\n

Attributes describing the change of state of a security signal.

\n
\n
\n
\n
\n
\n

archive_comment

\n
\n

string

\n

Optional comment to display on archived signals.

\n
\n \n
\n
\n
\n
\n
\n

archive_reason

\n
\n

enum

\n

Reason a signal is archived. \nAllowed enum values: none,false_positive,testing_or_maintenance,investigated_case_opened,true_positive_benign,true_positive_malicious,other

\n
\n \n
\n
\n
\n
\n
\n

state [required]

\n
\n

enum

\n

The new triage state of the signal. \nAllowed enum values: open,archived,under_review

\n
\n \n
\n
\n
\n
\n
\n

version

\n
\n

int64

\n

Version of the updated signal. If server side version is higher, update will be rejected.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

\n

The unique ID of the security signal.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of event. \nAllowed enum values: signal_metadata

default: signal_metadata

\n
\n \n
\n
\n
\n
" } }, "ListSecurityMonitoringHistsignals": { diff --git a/data/api/v2/full_spec.yaml b/data/api/v2/full_spec.yaml index a3b8f03052078..6d426a46ec087 100644 --- a/data/api/v2/full_spec.yaml +++ b/data/api/v2/full_spec.yaml @@ -44393,6 +44393,8 @@ components: - false_positive - testing_or_maintenance - investigated_case_opened + - true_positive_benign + - true_positive_malicious - other type: string x-enum-varnames: @@ -44400,6 +44402,8 @@ components: - FALSE_POSITIVE - TESTING_OR_MAINTENANCE - INVESTIGATED_CASE_OPENED + - TRUE_POSITIVE_BENIGN + - TRUE_POSITIVE_MALICIOUS - OTHER SecurityMonitoringSignalAssigneeUpdateAttributes: description: Attributes describing the new assignee of a security signal. diff --git a/data/api/v2/full_spec_deref.json b/data/api/v2/full_spec_deref.json index 7f036619dbe0b..52e083bfabcd3 100644 --- a/data/api/v2/full_spec_deref.json +++ b/data/api/v2/full_spec_deref.json @@ -321324,6 +321324,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -321332,6 +321334,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324192,6 +324196,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324200,6 +324206,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324246,6 +324254,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324254,6 +324264,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324324,6 +324336,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324332,6 +324346,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324442,6 +324458,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324450,6 +324468,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324620,6 +324640,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324628,6 +324650,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324820,6 +324844,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324828,6 +324854,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -678561,6 +678589,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -678569,6 +678599,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -678970,6 +679002,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -678978,6 +679012,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -679285,6 +679321,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -679293,6 +679331,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -679418,6 +679458,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -679426,6 +679468,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, diff --git a/static/resources/json/full_spec_v2.json b/static/resources/json/full_spec_v2.json index 7f036619dbe0b..52e083bfabcd3 100644 --- a/static/resources/json/full_spec_v2.json +++ b/static/resources/json/full_spec_v2.json @@ -321324,6 +321324,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -321332,6 +321334,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324192,6 +324196,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324200,6 +324206,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324246,6 +324254,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324254,6 +324264,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324324,6 +324336,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324332,6 +324346,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324442,6 +324458,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324450,6 +324468,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324620,6 +324640,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324628,6 +324650,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -324820,6 +324844,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -324828,6 +324854,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -678561,6 +678589,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -678569,6 +678599,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -678970,6 +679002,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -678978,6 +679012,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -679285,6 +679321,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -679293,6 +679331,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] }, @@ -679418,6 +679458,8 @@ "false_positive", "testing_or_maintenance", "investigated_case_opened", + "true_positive_benign", + "true_positive_malicious", "other" ], "type": "string", @@ -679426,6 +679468,8 @@ "FALSE_POSITIVE", "TESTING_OR_MAINTENANCE", "INVESTIGATED_CASE_OPENED", + "TRUE_POSITIVE_BENIGN", + "TRUE_POSITIVE_MALICIOUS", "OTHER" ] },