Security Detection

Get Security Detection

Endpoint to retrieve a single Security Detection by ID

post/security-detection/{id}/get-item

Request

Path parameters

idstring uuid required

ID of the Security Detection to retrieve

Request body

Example request

{
  "select": {
    "_id": true,
    "createdAt": true,
    "updatedAt": true,
    "severity": true,
    "source": true
  }
}

Response

Successful response

Example response

{
  "data": {
    "_id": "123e4567-e89b-12d3-a456-426614174000",
    "createdAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "updatedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "deletedAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "version": 42,
    "projectId": "123e4567-e89b-12d3-a456-426614174000",
    "securityCaseId": "123e4567-e89b-12d3-a456-426614174000",
    "title": "This is an example of longer text content that might be stored in this field.",
    "description": "# Heading\n\nThis is **markdown** content",
    "severity": "Unknown",
    "source": "Detection Rule",
    "fingerprint": "This is an example of longer text content that might be stored in this field.",
    "ruleName": "This is an example of longer text content that might be stored in this field.",
    "detectionRuleId": "123e4567-e89b-12d3-a456-426614174000",
    "threatIntelFeedId": "123e4567-e89b-12d3-a456-426614174000",
    "securityEventConnectionId": "123e4567-e89b-12d3-a456-426614174000",
    "groupValue": "This is an example of longer text content that might be stored in this field.",
    "entities": {
      "key": "value",
      "nested": {
        "data": 123
      }
    },
    "mitreTactics": {
      "key": "value",
      "nested": {
        "data": 123
      }
    },
    "mitreTechniques": {
      "key": "value",
      "nested": {
        "data": 123
      }
    },
    "eventCount": 42,
    "fireCount": 42,
    "firstSeenAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "lastSeenAt": {
      "_type": "DateTime",
      "value": "2023-10-01T12:00:00Z"
    },
    "sampleMessage": "This is an example of very long text content that might be stored in this field. It can contain a lot of information, such as detailed descriptions, comments, or any other lengthy text data that needs to be stored in the database.",
    "eventUid": "This is an example of longer text content that might be stored in this field.",
    "deletedByUserId": "123e4567-e89b-12d3-a456-426614174000"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.