RErecordedfuture
Auto Sigma

Update a Sigma Rule

Classify a Sigma rule's detection quality and optionally update its YAML content.

post/v1/auto-sigma/jobs/{jobId}/{ruleId}

Request

  • Base URL
    https://api.recordedfuture.com/malware-intelligence
  • URL
    https://api.recordedfuture.com/malware-intelligence/v1/auto-sigma/jobs/{jobId}/{ruleId}
  • Auth
    • OAuth 2
      Authorization code: https://id.recordedfuture.com/authorize
      Token URL: https://id.recordedfuture.com/token
    • or API key in header X-RFToken

Path parameters

jobIdstring required
ruleIdstring required

Request body

rule_yamlstring

Sigma rule in YAML format

status'True Positive' | 'False Positive' | 'Benign Behavior' | 'No Root Cause' | 'Needs Tuning' | 'New'

Selected status of the rule

Response

Successful Response

boolean required

Boolean indicating if rule was updated or not

Changes

No recorded changes to this operation across all 1 revision of this API.