--- updatedAt: 2026-07-02T14:53:06.000Z --- # Gets the list of events by start date # OpenAPI definition ```json { "openapi": "3.0.1", "info": { "title": "BeyondTrust PM Cloud Management API - Version 3", "description": "BeyondTrust PM Cloud Management API - Version 3", "version": "v3" }, "servers": [ { "url": "https://{example.com}/management-api" } ], "paths": { "/v3/Events/FromStartDate": { "get": { "tags": [ "Events" ], "summary": "Gets the list of events by start date", "parameters": [ { "name": "StartDate", "in": "query", "description": "Start Date(UTC) to search events from (Elastic Ingestion Timestamp in UTC). Example: 2022-08-12T17:34:28.694Z", "required": true, "schema": { "type": "string" } }, { "name": "RecordSize", "in": "query", "description": "Maximum records that can be returned. Min size: 1, Max size: 1000, Example: 100", "schema": { "type": "integer", "format": "int32", "default": 1000 } } ], "responses": { "200": { "description": "Success", "content": { "text/plain": { "schema": { "$ref": "#/components/schemas/EpmEcsEventResponseModel" } }, "application/json": { "schema": { "$ref": "#/components/schemas/EpmEcsEventResponseModel" } }, "text/json": { "schema": { "$ref": "#/components/schemas/EpmEcsEventResponseModel" } } } }, "400": { "description": "Bad Request", "content": { "text/plain": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } }, "application/json": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } }, "text/json": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } } } }, "401": { "description": "Unauthorized", "content": { "text/plain": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } }, "application/json": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } }, "text/json": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } } } }, "404": { "description": "Not Found", "content": { "text/plain": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } }, "application/json": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } }, "text/json": { "schema": { "$ref": "#/components/schemas/ProblemDetails" } } } }, "500": { "description": "Server Error" } }, "security": [ { "bearer": [], "oauth2": [] } ] } } }, "components": { "schemas": { "Activex": { "type": "object", "properties": { "Codebase": { "type": "string", "nullable": true }, "CLSID": { "type": "string", "nullable": true }, "Version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Agent": { "type": "object", "properties": { "version": { "type": "string", "nullable": true }, "build": { "$ref": "#/components/schemas/AgentBuild" }, "name": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "ephemeral_id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "AgentBuild": { "type": "object", "properties": { "original": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Application": { "type": "object", "properties": { "Type": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Applicationgroup": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true } }, "additionalProperties": false }, "As": { "type": "object", "properties": { "number": { "type": "integer", "format": "int64", "nullable": true }, "organization": { "$ref": "#/components/schemas/AsOrganization" } }, "additionalProperties": false }, "AsOrganization": { "type": "object", "properties": { "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Authentication": { "type": "object", "properties": { "User": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Authorization": { "type": "object", "properties": { "ChallengeCode": { "type": "string", "nullable": true }, "ResponseStatus": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Authorizationrequest": { "type": "object", "properties": { "ControlAuthorization": { "type": "boolean", "nullable": true }, "AuthRequestURI": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Authorizinguser": { "type": "object", "properties": { "Identifier": { "type": "string", "nullable": true }, "Name": { "type": "string", "nullable": true }, "DomainIdentifier": { "type": "string", "nullable": true }, "DomainNetBIOSName": { "type": "string", "nullable": true }, "DomainName": { "type": "string", "nullable": true }, "CredentialSource": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Bundle": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "Type": { "type": "string", "nullable": true }, "Creator": { "type": "string", "nullable": true }, "InfoDescription": { "type": "string", "nullable": true }, "Version": { "type": "string", "nullable": true }, "DownloadSource": { "type": "string", "nullable": true }, "Uri": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Client": { "type": "object", "properties": { "address": { "type": "string", "nullable": true }, "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true }, "mac": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "registered_domain": { "type": "string", "nullable": true }, "top_level_domain": { "type": "string", "nullable": true }, "subdomain": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true }, "packets": { "type": "integer", "format": "int64", "nullable": true }, "nat": { "$ref": "#/components/schemas/ClientNat" }, "Name": { "type": "string", "nullable": true }, "as": { "$ref": "#/components/schemas/As" }, "geo": { "$ref": "#/components/schemas/Geo" }, "user": { "$ref": "#/components/schemas/User" } }, "additionalProperties": false }, "ClientNat": { "type": "object", "properties": { "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Cloud": { "type": "object", "properties": { "provider": { "type": "string", "nullable": true }, "availability_zone": { "type": "string", "nullable": true }, "region": { "type": "string", "nullable": true }, "instance": { "$ref": "#/components/schemas/CloudInstance" }, "machine": { "$ref": "#/components/schemas/CloudMachine" }, "account": { "$ref": "#/components/schemas/CloudAccount" }, "service": { "$ref": "#/components/schemas/CloudService" }, "project": { "$ref": "#/components/schemas/CloudProject" }, "origin": { "$ref": "#/components/schemas/CloudOrigin" }, "target": { "$ref": "#/components/schemas/CloudTarget" } }, "additionalProperties": false }, "CloudAccount": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "CloudInstance": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "CloudMachine": { "type": "object", "properties": { "type": { "type": "string", "nullable": true } }, "additionalProperties": false }, "CloudOrigin": { "type": "object", "properties": { "provider": { "type": "string", "nullable": true }, "availability_zone": { "type": "string", "nullable": true }, "region": { "type": "string", "nullable": true }, "instance": { "$ref": "#/components/schemas/CloudInstance" }, "machine": { "$ref": "#/components/schemas/CloudMachine" }, "account": { "$ref": "#/components/schemas/CloudAccount" }, "service": { "$ref": "#/components/schemas/CloudService" }, "project": { "$ref": "#/components/schemas/CloudProject" } }, "additionalProperties": false }, "CloudProject": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "CloudService": { "type": "object", "properties": { "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "CloudTarget": { "type": "object", "properties": { "provider": { "type": "string", "nullable": true }, "availability_zone": { "type": "string", "nullable": true }, "region": { "type": "string", "nullable": true }, "instance": { "$ref": "#/components/schemas/CloudInstance" }, "machine": { "$ref": "#/components/schemas/CloudMachine" }, "account": { "$ref": "#/components/schemas/CloudAccount" }, "service": { "$ref": "#/components/schemas/CloudService" }, "project": { "$ref": "#/components/schemas/CloudProject" } }, "additionalProperties": false }, "CodeSignature": { "type": "object", "properties": { "exists": { "type": "boolean", "nullable": true }, "subject_name": { "type": "string", "nullable": true }, "valid": { "type": "boolean", "nullable": true }, "trusted": { "type": "boolean", "nullable": true }, "status": { "type": "string", "nullable": true }, "team_id": { "type": "string", "nullable": true }, "signing_id": { "type": "string", "nullable": true }, "digest_algorithm": { "type": "string", "nullable": true }, "timestamp": { "type": "string", "format": "date-time", "nullable": true } }, "additionalProperties": false }, "Com": { "type": "object", "properties": { "AppID": { "type": "string", "nullable": true }, "CLSID": { "type": "string", "nullable": true }, "DisplayName": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Configuration": { "type": "object", "properties": { "Identifier": { "type": "string", "nullable": true }, "RevisionNumber": { "type": "string", "nullable": true }, "Source": { "type": "string", "nullable": true }, "Name": { "type": "string", "nullable": true }, "Path": { "type": "string", "nullable": true }, "LoadAuditMode": { "type": "array", "items": { "type": "string" }, "nullable": true }, "SigningEnforcement": { "type": "string", "nullable": true }, "Application": { "$ref": "#/components/schemas/Application" }, "ApplicationGroup": { "$ref": "#/components/schemas/Applicationgroup" }, "Content": { "$ref": "#/components/schemas/Content" }, "ContentGroup": { "$ref": "#/components/schemas/Contentgroup" }, "GPO": { "$ref": "#/components/schemas/Gpo" }, "Message": { "$ref": "#/components/schemas/Message" }, "Rule": { "$ref": "#/components/schemas/Rule" }, "RuleScript": { "$ref": "#/components/schemas/Rulescript" }, "Token": { "$ref": "#/components/schemas/Token" }, "Workstyle": { "$ref": "#/components/schemas/Workstyle" } }, "additionalProperties": false }, "Container": { "type": "object", "properties": { "cpu": { "$ref": "#/components/schemas/ContainerCpu" }, "disk": { "$ref": "#/components/schemas/ContainerDisk" }, "id": { "type": "string", "nullable": true }, "image": { "$ref": "#/components/schemas/ContainerImage" }, "labels": { "type": "string", "nullable": true }, "memory": { "$ref": "#/components/schemas/ContainerMemory" }, "name": { "type": "string", "nullable": true }, "network": { "$ref": "#/components/schemas/ContainerNetwork" }, "runtime": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ContainerCpu": { "type": "object", "properties": { "usage": { "type": "number", "format": "double", "nullable": true } }, "additionalProperties": false }, "ContainerDisk": { "type": "object", "properties": { "read": { "$ref": "#/components/schemas/ContainerDiskRead" }, "write": { "$ref": "#/components/schemas/ContainerDiskWrite" } }, "additionalProperties": false }, "ContainerDiskRead": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "ContainerDiskWrite": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "ContainerImage": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "tag": { "type": "array", "items": { "type": "string" }, "nullable": true }, "hash": { "$ref": "#/components/schemas/ContainerImageHash" } }, "additionalProperties": false }, "ContainerImageHash": { "type": "object", "properties": { "all": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "ContainerMemory": { "type": "object", "properties": { "usage": { "type": "number", "format": "double", "nullable": true } }, "additionalProperties": false }, "ContainerNetwork": { "type": "object", "properties": { "ingress": { "$ref": "#/components/schemas/ContainerNetworkIngress" }, "egress": { "$ref": "#/components/schemas/ContainerNetworkEgress" } }, "additionalProperties": false }, "ContainerNetworkEgress": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "ContainerNetworkIngress": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Content": { "type": "object", "properties": { "Type": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Contentgroup": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true } }, "additionalProperties": false }, "DataStream": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "dataset": { "type": "string", "nullable": true }, "namespace": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Destination": { "type": "object", "properties": { "address": { "type": "string", "nullable": true }, "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true }, "mac": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "registered_domain": { "type": "string", "nullable": true }, "top_level_domain": { "type": "string", "nullable": true }, "subdomain": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true }, "packets": { "type": "integer", "format": "int64", "nullable": true }, "nat": { "$ref": "#/components/schemas/DestinationNat" }, "as": { "$ref": "#/components/schemas/As" }, "geo": { "$ref": "#/components/schemas/Geo" }, "user": { "$ref": "#/components/schemas/User" } }, "additionalProperties": false }, "DestinationNat": { "type": "object", "properties": { "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Dll": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "path": { "type": "string", "nullable": true }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" } }, "additionalProperties": false }, "Dns": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "op_code": { "type": "string", "nullable": true }, "header_flags": { "type": "array", "items": { "type": "string" }, "nullable": true }, "response_code": { "type": "string", "nullable": true }, "question": { "$ref": "#/components/schemas/DnsQuestion" }, "answers": { "type": "string", "nullable": true }, "resolved_ip": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "DnsQuestion": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "class": { "type": "string", "nullable": true }, "registered_domain": { "type": "string", "nullable": true }, "top_level_domain": { "type": "string", "nullable": true }, "subdomain": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Ecs": { "type": "object", "properties": { "version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Elf": { "type": "object", "properties": { "creation_date": { "type": "string", "format": "date-time", "nullable": true }, "architecture": { "type": "string", "nullable": true }, "byte_order": { "type": "string", "nullable": true }, "cpu_type": { "type": "string", "nullable": true }, "header": { "$ref": "#/components/schemas/ElfHeader" }, "sections": { "type": "array", "items": { "$ref": "#/components/schemas/ElfSections" }, "nullable": true }, "exports": { "type": "object", "additionalProperties": { "type": "string" }, "nullable": true }, "imports": { "type": "object", "additionalProperties": { "type": "string" }, "nullable": true }, "shared_libraries": { "type": "array", "items": { "type": "string" }, "nullable": true }, "telfhash": { "type": "string", "nullable": true }, "segments": { "type": "array", "items": { "$ref": "#/components/schemas/ElfSegments" }, "nullable": true } }, "additionalProperties": false }, "ElfHeader": { "type": "object", "properties": { "class": { "type": "string", "nullable": true }, "data": { "type": "string", "nullable": true }, "os_abi": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "abi_version": { "type": "string", "nullable": true }, "entrypoint": { "type": "integer", "format": "int64", "nullable": true }, "object_version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ElfSections": { "type": "object", "properties": { "flags": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "physical_offset": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "physical_size": { "type": "integer", "format": "int64", "nullable": true }, "virtual_address": { "type": "integer", "format": "int64", "nullable": true }, "virtual_size": { "type": "integer", "format": "int64", "nullable": true }, "entropy": { "type": "integer", "format": "int64", "nullable": true }, "chi2": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "ElfSegments": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "sections": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Email": { "type": "object", "properties": { "attachments": { "type": "array", "items": { "$ref": "#/components/schemas/EmailAttachments" }, "nullable": true }, "bcc": { "$ref": "#/components/schemas/EmailBcc" }, "cc": { "$ref": "#/components/schemas/EmailCc" }, "content_type": { "type": "string", "nullable": true }, "delivery_timestamp": { "type": "string", "format": "date-time", "nullable": true }, "direction": { "type": "string", "nullable": true }, "from": { "$ref": "#/components/schemas/EmailFrom" }, "local_id": { "type": "string", "nullable": true }, "message_id": { "type": "string", "nullable": true }, "origination_timestamp": { "type": "string", "format": "date-time", "nullable": true }, "reply_to": { "$ref": "#/components/schemas/EmailReplyTo" }, "sender": { "$ref": "#/components/schemas/EmailSender" }, "subject": { "type": "string", "nullable": true }, "to": { "$ref": "#/components/schemas/EmailTo" }, "x_mailer": { "type": "string", "nullable": true } }, "additionalProperties": false }, "EmailAttachments": { "type": "object", "properties": { "file": { "$ref": "#/components/schemas/EmailAttachmentsFile" } }, "additionalProperties": false }, "EmailAttachmentsFile": { "type": "object", "properties": { "extension": { "type": "string", "nullable": true }, "mime_type": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "size": { "type": "integer", "format": "int64", "nullable": true }, "hash": { "$ref": "#/components/schemas/Hash" } }, "additionalProperties": false }, "EmailBcc": { "type": "object", "properties": { "address": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "EmailCc": { "type": "object", "properties": { "address": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "EmailFrom": { "type": "object", "properties": { "address": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "EmailReplyTo": { "type": "object", "properties": { "address": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "EmailSender": { "type": "object", "properties": { "address": { "type": "string", "nullable": true } }, "additionalProperties": false }, "EmailTo": { "type": "object", "properties": { "address": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "EpmEcsEvent": { "type": "object", "properties": { "agent": { "$ref": "#/components/schemas/Agent" }, "@timestamp": { "type": "string", "format": "date-time", "nullable": true }, "tags": { "type": "array", "items": { "type": "string" }, "nullable": true }, "labels": { "type": "string", "nullable": true }, "message": { "type": "string", "nullable": true }, "client": { "$ref": "#/components/schemas/Client" }, "cloud": { "$ref": "#/components/schemas/Cloud" }, "container": { "$ref": "#/components/schemas/Container" }, "data_stream": { "$ref": "#/components/schemas/DataStream" }, "destination": { "$ref": "#/components/schemas/Destination" }, "dll": { "$ref": "#/components/schemas/Dll" }, "dns": { "$ref": "#/components/schemas/Dns" }, "ecs": { "$ref": "#/components/schemas/Ecs" }, "email": { "$ref": "#/components/schemas/Email" }, "error": { "$ref": "#/components/schemas/Error" }, "event": { "$ref": "#/components/schemas/_event" }, "faas": { "$ref": "#/components/schemas/Faas" }, "file": { "$ref": "#/components/schemas/File" }, "group": { "$ref": "#/components/schemas/Group" }, "host": { "$ref": "#/components/schemas/Host" }, "http": { "$ref": "#/components/schemas/Http" }, "log": { "$ref": "#/components/schemas/Log" }, "network": { "$ref": "#/components/schemas/Network" }, "observer": { "$ref": "#/components/schemas/Observer" }, "orchestrator": { "$ref": "#/components/schemas/Orchestrator" }, "organization": { "$ref": "#/components/schemas/Organization" }, "package": { "$ref": "#/components/schemas/Package" }, "process": { "$ref": "#/components/schemas/Process" }, "registry": { "$ref": "#/components/schemas/Registry" }, "related": { "$ref": "#/components/schemas/Related" }, "rule": { "$ref": "#/components/schemas/_rule" }, "server": { "$ref": "#/components/schemas/Server" }, "service": { "$ref": "#/components/schemas/Service" }, "source": { "$ref": "#/components/schemas/Source" }, "threat": { "$ref": "#/components/schemas/Threat" }, "tls": { "$ref": "#/components/schemas/Tls" }, "trace": { "$ref": "#/components/schemas/EpmEcsEventTrace" }, "transaction": { "$ref": "#/components/schemas/EpmEcsEventTransaction" }, "span": { "$ref": "#/components/schemas/EpmEcsEventSpan" }, "url": { "$ref": "#/components/schemas/Url" }, "user": { "$ref": "#/components/schemas/User" }, "user_agent": { "$ref": "#/components/schemas/UserAgent" }, "vulnerability": { "$ref": "#/components/schemas/Vulnerability" }, "EPMWinMac": { "$ref": "#/components/schemas/Epmwinmac" } }, "additionalProperties": false }, "EpmEcsEventResponseModel": { "type": "object", "properties": { "totalRecordsReturned": { "type": "integer", "description": "Total records returned by query", "format": "int64" }, "events": { "type": "array", "items": { "$ref": "#/components/schemas/EpmEcsEvent" }, "description": "List of events returned by query", "nullable": true } }, "additionalProperties": false, "description": "This class holds Epm Ecs Event response" }, "EpmEcsEventSpan": { "type": "object", "properties": { "id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "EpmEcsEventTrace": { "type": "object", "properties": { "id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "EpmEcsEventTransaction": { "type": "object", "properties": { "id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Epmwinmac": { "type": "object", "properties": { "SchemaVersion": { "type": "string", "nullable": true }, "GroupId": { "type": "string", "nullable": true }, "TenantId": { "type": "string", "nullable": true }, "AdapterVersion": { "type": "string", "nullable": true }, "ActiveX": { "$ref": "#/components/schemas/Activex" }, "AuthorizationRequest": { "$ref": "#/components/schemas/Authorizationrequest" }, "AuthorizingUser": { "$ref": "#/components/schemas/Authorizinguser" }, "COM": { "$ref": "#/components/schemas/Com" }, "Configuration": { "$ref": "#/components/schemas/Configuration" }, "Event": { "$ref": "#/components/schemas/Event" }, "Installer": { "$ref": "#/components/schemas/Installer" }, "License": { "$ref": "#/components/schemas/License" }, "PrivilegedGroup": { "$ref": "#/components/schemas/Privilegedgroup" }, "RemotePowerShell": { "$ref": "#/components/schemas/Remotepowershell" }, "ServiceControl": { "$ref": "#/components/schemas/Servicecontrol" }, "Session": { "$ref": "#/components/schemas/Session" }, "StoreApp": { "$ref": "#/components/schemas/Storeapp" }, "TrustedApplication": { "$ref": "#/components/schemas/Trustedapplication" } }, "additionalProperties": false }, "Error": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "message": { "type": "string", "nullable": true }, "code": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "stack_trace": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Event": { "type": "object", "properties": { "Type": { "type": "string", "nullable": true }, "Action": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Faas": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "coldstart": { "type": "boolean", "nullable": true }, "execution": { "type": "string", "nullable": true }, "trigger": { "$ref": "#/components/schemas/FaasTrigger" } }, "additionalProperties": false }, "FaasTrigger": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "request_id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "File": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "attributes": { "type": "array", "items": { "type": "string" }, "nullable": true }, "directory": { "type": "string", "nullable": true }, "drive_letter": { "type": "string", "nullable": true }, "path": { "type": "string", "nullable": true }, "target_path": { "type": "string", "nullable": true }, "extension": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "device": { "type": "string", "nullable": true }, "inode": { "type": "string", "nullable": true }, "uid": { "type": "string", "nullable": true }, "owner": { "type": "string", "nullable": true }, "gid": { "type": "string", "nullable": true }, "group": { "type": "string", "nullable": true }, "mode": { "type": "string", "nullable": true }, "size": { "type": "integer", "format": "int64", "nullable": true }, "mtime": { "type": "string", "format": "date-time", "nullable": true }, "ctime": { "type": "string", "format": "date-time", "nullable": true }, "created": { "type": "string", "format": "date-time", "nullable": true }, "accessed": { "type": "string", "format": "date-time", "nullable": true }, "mime_type": { "type": "string", "nullable": true }, "fork_name": { "type": "string", "nullable": true }, "DriveType": { "type": "string", "nullable": true }, "SourceUrl": { "type": "string", "nullable": true }, "ZoneTag": { "type": "string", "nullable": true }, "ProductVersion": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "Version": { "type": "string", "nullable": true }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "x509": { "$ref": "#/components/schemas/X509" }, "Bundle": { "$ref": "#/components/schemas/Bundle" }, "Owner": { "$ref": "#/components/schemas/Owner" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" }, "elf": { "$ref": "#/components/schemas/Elf" } }, "additionalProperties": false }, "Geo": { "type": "object", "properties": { "location": { "$ref": "#/components/schemas/GeoPoint" }, "continent_code": { "type": "string", "nullable": true }, "continent_name": { "type": "string", "nullable": true }, "country_name": { "type": "string", "nullable": true }, "region_name": { "type": "string", "nullable": true }, "city_name": { "type": "string", "nullable": true }, "country_iso_code": { "type": "string", "nullable": true }, "postal_code": { "type": "string", "nullable": true }, "region_iso_code": { "type": "string", "nullable": true }, "timezone": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "TimezoneOffset": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "GeoPoint": { "type": "object", "properties": { "lon": { "type": "number", "format": "double", "nullable": true }, "lat": { "type": "number", "format": "double", "nullable": true } }, "additionalProperties": false }, "Gpo": { "type": "object", "properties": { "Version": { "type": "string", "nullable": true }, "DisplayName": { "type": "string", "nullable": true }, "ActiveDirectoryPath": { "type": "string", "nullable": true }, "LinkInformation": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Group": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Hash": { "type": "object", "properties": { "md5": { "type": "string", "nullable": true }, "sha1": { "type": "string", "nullable": true }, "sha256": { "type": "string", "nullable": true }, "sha384": { "type": "string", "nullable": true }, "sha512": { "type": "string", "nullable": true }, "ssdeep": { "type": "string", "nullable": true }, "tlsh": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Host": { "type": "object", "properties": { "hostname": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "ip": { "type": "array", "items": { "type": "string" }, "nullable": true }, "mac": { "type": "array", "items": { "type": "string" }, "nullable": true }, "type": { "type": "string", "nullable": true }, "uptime": { "type": "integer", "format": "int64", "nullable": true }, "architecture": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "cpu": { "$ref": "#/components/schemas/HostCpu" }, "disk": { "$ref": "#/components/schemas/HostDisk" }, "network": { "$ref": "#/components/schemas/HostNetwork" }, "boot": { "$ref": "#/components/schemas/HostBoot" }, "pid_ns_ino": { "type": "string", "nullable": true }, "DomainIdentifier": { "type": "string", "nullable": true }, "NetBIOSName": { "type": "string", "nullable": true }, "DomainNetBIOSName": { "type": "string", "nullable": true }, "ChassisType": { "type": "string", "nullable": true }, "DefaultLocale": { "type": "string", "nullable": true }, "DefaultUILanguage": { "type": "string", "nullable": true }, "geo": { "$ref": "#/components/schemas/Geo" }, "os": { "$ref": "#/components/schemas/Os" } }, "additionalProperties": false }, "HostBoot": { "type": "object", "properties": { "id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "HostCpu": { "type": "object", "properties": { "usage": { "type": "number", "format": "double", "nullable": true } }, "additionalProperties": false }, "HostDisk": { "type": "object", "properties": { "read": { "$ref": "#/components/schemas/HostDiskRead" }, "write": { "$ref": "#/components/schemas/HostDiskWrite" } }, "additionalProperties": false }, "HostDiskRead": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "HostDiskWrite": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "HostNetwork": { "type": "object", "properties": { "ingress": { "$ref": "#/components/schemas/HostNetworkIngress" }, "egress": { "$ref": "#/components/schemas/HostNetworkEgress" } }, "additionalProperties": false }, "HostNetworkEgress": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true }, "packets": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "HostNetworkIngress": { "type": "object", "properties": { "bytes": { "type": "integer", "format": "int64", "nullable": true }, "packets": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Http": { "type": "object", "properties": { "request": { "$ref": "#/components/schemas/HttpRequest" }, "response": { "$ref": "#/components/schemas/HttpResponse" }, "version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "HttpRequest": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "method": { "type": "string", "nullable": true }, "mime_type": { "type": "string", "nullable": true }, "body": { "$ref": "#/components/schemas/HttpRequestBody" }, "referrer": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "HttpRequestBody": { "type": "object", "properties": { "content": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "HttpResponse": { "type": "object", "properties": { "status_code": { "type": "integer", "format": "int64", "nullable": true }, "mime_type": { "type": "string", "nullable": true }, "body": { "$ref": "#/components/schemas/HttpResponseBody" }, "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "HttpResponseBody": { "type": "object", "properties": { "content": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Installer": { "type": "object", "properties": { "ProductCode": { "type": "string", "nullable": true }, "UpgradeCode": { "type": "string", "nullable": true }, "Action": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Jitadmin": { "type": "object", "properties": { "RequestIdentifier": { "type": "string", "nullable": true }, "TicketIdentifier": { "type": "string", "nullable": true }, "Configuration": { "$ref": "#/components/schemas/Configuration" } }, "additionalProperties": false }, "License": { "type": "object", "properties": { "InvalidReason": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Log": { "type": "object", "properties": { "level": { "type": "string", "nullable": true }, "file": { "$ref": "#/components/schemas/LogFile" }, "logger": { "type": "string", "nullable": true }, "origin": { "$ref": "#/components/schemas/LogOrigin" }, "syslog": { "type": "string", "nullable": true } }, "additionalProperties": false }, "LogFile": { "type": "object", "properties": { "path": { "type": "string", "nullable": true } }, "additionalProperties": false }, "LogOrigin": { "type": "object", "properties": { "file": { "$ref": "#/components/schemas/LogOriginFile" }, "function": { "type": "string", "nullable": true } }, "additionalProperties": false }, "LogOriginFile": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "line": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Message": { "type": "object", "properties": { "Type": { "type": "string", "nullable": true }, "Name": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "UserReason": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true }, "AuthMethods": { "type": "array", "items": { "type": "string" }, "nullable": true }, "UserRequestManagementId": { "type": "string", "nullable": true }, "Authorization": { "$ref": "#/components/schemas/Authorization" }, "Authentication": { "$ref": "#/components/schemas/Authentication" } }, "additionalProperties": false }, "Network": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "iana_number": { "type": "string", "nullable": true }, "transport": { "type": "string", "nullable": true }, "application": { "type": "string", "nullable": true }, "protocol": { "type": "string", "nullable": true }, "direction": { "type": "string", "nullable": true }, "forwarded_ip": { "type": "string", "nullable": true }, "community_id": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true }, "packets": { "type": "integer", "format": "int64", "nullable": true }, "inner": { "type": "string", "nullable": true }, "vlan": { "$ref": "#/components/schemas/Vlan" } }, "additionalProperties": false }, "Observer": { "type": "object", "properties": { "mac": { "type": "array", "items": { "type": "string" }, "nullable": true }, "ip": { "type": "array", "items": { "type": "string" }, "nullable": true }, "hostname": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "product": { "type": "string", "nullable": true }, "vendor": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "serial_number": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "ingress": { "type": "string", "nullable": true }, "egress": { "type": "string", "nullable": true }, "geo": { "$ref": "#/components/schemas/Geo" }, "os": { "$ref": "#/components/schemas/Os" } }, "additionalProperties": false }, "Orchestrator": { "type": "object", "properties": { "cluster": { "$ref": "#/components/schemas/OrchestratorCluster" }, "type": { "type": "string", "nullable": true }, "organization": { "type": "string", "nullable": true }, "namespace": { "type": "string", "nullable": true }, "resource": { "$ref": "#/components/schemas/OrchestratorResource" }, "api_version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "OrchestratorCluster": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "url": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "OrchestratorResource": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true }, "parent": { "$ref": "#/components/schemas/OrchestratorResourceParent" }, "ip": { "type": "array", "items": { "type": "string" }, "nullable": true }, "id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "OrchestratorResourceParent": { "type": "object", "properties": { "type": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Organization": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Os": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "platform": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "full": { "type": "string", "nullable": true }, "family": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "kernel": { "type": "string", "nullable": true }, "ProductType": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Owner": { "type": "object", "properties": { "Identifier": { "type": "string", "nullable": true }, "Name": { "type": "string", "nullable": true }, "DomainIdentifier": { "type": "string", "nullable": true }, "DomainName": { "type": "string", "nullable": true }, "DomainNetBIOSName": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Package": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "build_version": { "type": "string", "nullable": true }, "description": { "type": "string", "nullable": true }, "size": { "type": "integer", "format": "int64", "nullable": true }, "installed": { "type": "string", "format": "date-time", "nullable": true }, "path": { "type": "string", "nullable": true }, "architecture": { "type": "string", "nullable": true }, "checksum": { "type": "string", "nullable": true }, "install_scope": { "type": "string", "nullable": true }, "license": { "type": "string", "nullable": true }, "reference": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Pe": { "type": "object", "properties": { "original_file_name": { "type": "string", "nullable": true }, "file_version": { "type": "string", "nullable": true }, "description": { "type": "string", "nullable": true }, "product": { "type": "string", "nullable": true }, "company": { "type": "string", "nullable": true }, "imphash": { "type": "string", "nullable": true }, "architecture": { "type": "string", "nullable": true }, "pehash": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Privilegedgroup": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "RID": { "type": "string", "nullable": true }, "Access": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ProblemDetails": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "title": { "type": "string", "nullable": true }, "status": { "type": "integer", "format": "int32", "nullable": true }, "detail": { "type": "string", "nullable": true }, "instance": { "type": "string", "nullable": true } }, "additionalProperties": {} }, "Process": { "type": "object", "properties": { "pid": { "type": "integer", "format": "int64", "nullable": true }, "entity_id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "pgid": { "type": "integer", "format": "int64", "nullable": true }, "command_line": { "type": "string", "nullable": true }, "args": { "type": "array", "items": { "type": "string" }, "nullable": true }, "args_count": { "type": "integer", "format": "int64", "nullable": true }, "executable": { "type": "string", "nullable": true }, "title": { "type": "string", "nullable": true }, "thread": { "$ref": "#/components/schemas/ProcessThread" }, "start": { "type": "string", "format": "date-time", "nullable": true }, "uptime": { "type": "integer", "format": "int64", "nullable": true }, "working_directory": { "type": "string", "nullable": true }, "exit_code": { "type": "integer", "format": "int64", "nullable": true }, "end": { "type": "string", "format": "date-time", "nullable": true }, "interactive": { "type": "boolean", "nullable": true }, "same_as_process": { "type": "boolean", "nullable": true }, "env_vars": { "type": "string", "nullable": true }, "entry_meta": { "$ref": "#/components/schemas/ProcessEntryMeta" }, "tty": { "type": "string", "nullable": true }, "ElevationRequired": { "type": "boolean", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" }, "real_group": { "$ref": "#/components/schemas/Group" }, "saved_group": { "$ref": "#/components/schemas/Group" }, "supplemental_groups": { "$ref": "#/components/schemas/Group" }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" }, "elf": { "$ref": "#/components/schemas/Elf" }, "HostedFile": { "$ref": "#/components/schemas/File" }, "user": { "$ref": "#/components/schemas/User" }, "saved_user": { "$ref": "#/components/schemas/User" }, "real_user": { "$ref": "#/components/schemas/User" }, "parent": { "$ref": "#/components/schemas/ProcessParent" }, "entry_leader": { "$ref": "#/components/schemas/ProcessEntryLeader" }, "session_leader": { "$ref": "#/components/schemas/ProcessSessionLeader" }, "group_leader": { "$ref": "#/components/schemas/ProcessGroupLeader" }, "previous": { "$ref": "#/components/schemas/ProcessPrevious" } }, "additionalProperties": false }, "ProcessEntryLeader": { "type": "object", "properties": { "pid": { "type": "integer", "format": "int64", "nullable": true }, "entity_id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "pgid": { "type": "integer", "format": "int64", "nullable": true }, "command_line": { "type": "string", "nullable": true }, "args": { "type": "array", "items": { "type": "string" }, "nullable": true }, "args_count": { "type": "integer", "format": "int64", "nullable": true }, "executable": { "type": "string", "nullable": true }, "title": { "type": "string", "nullable": true }, "thread": { "$ref": "#/components/schemas/ProcessThread" }, "start": { "type": "string", "format": "date-time", "nullable": true }, "uptime": { "type": "integer", "format": "int64", "nullable": true }, "working_directory": { "type": "string", "nullable": true }, "exit_code": { "type": "integer", "format": "int64", "nullable": true }, "end": { "type": "string", "format": "date-time", "nullable": true }, "interactive": { "type": "boolean", "nullable": true }, "same_as_process": { "type": "boolean", "nullable": true }, "env_vars": { "type": "string", "nullable": true }, "entry_meta": { "$ref": "#/components/schemas/ProcessEntryMeta" }, "tty": { "type": "string", "nullable": true }, "ElevationRequired": { "type": "boolean", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" }, "real_group": { "$ref": "#/components/schemas/Group" }, "saved_group": { "$ref": "#/components/schemas/Group" }, "supplemental_groups": { "$ref": "#/components/schemas/Group" }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" }, "elf": { "$ref": "#/components/schemas/Elf" }, "HostedFile": { "$ref": "#/components/schemas/File" }, "user": { "$ref": "#/components/schemas/User" }, "saved_user": { "$ref": "#/components/schemas/User" }, "real_user": { "$ref": "#/components/schemas/User" }, "parent": { "$ref": "#/components/schemas/ProcessParent" } }, "additionalProperties": false }, "ProcessEntryMeta": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "source": { "$ref": "#/components/schemas/Source" } }, "additionalProperties": false }, "ProcessGroupLeader": { "type": "object", "properties": { "pid": { "type": "integer", "format": "int64", "nullable": true }, "entity_id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "pgid": { "type": "integer", "format": "int64", "nullable": true }, "command_line": { "type": "string", "nullable": true }, "args": { "type": "array", "items": { "type": "string" }, "nullable": true }, "args_count": { "type": "integer", "format": "int64", "nullable": true }, "executable": { "type": "string", "nullable": true }, "title": { "type": "string", "nullable": true }, "thread": { "$ref": "#/components/schemas/ProcessThread" }, "start": { "type": "string", "format": "date-time", "nullable": true }, "uptime": { "type": "integer", "format": "int64", "nullable": true }, "working_directory": { "type": "string", "nullable": true }, "exit_code": { "type": "integer", "format": "int64", "nullable": true }, "end": { "type": "string", "format": "date-time", "nullable": true }, "interactive": { "type": "boolean", "nullable": true }, "same_as_process": { "type": "boolean", "nullable": true }, "env_vars": { "type": "string", "nullable": true }, "entry_meta": { "$ref": "#/components/schemas/ProcessEntryMeta" }, "tty": { "type": "string", "nullable": true }, "ElevationRequired": { "type": "boolean", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" }, "real_group": { "$ref": "#/components/schemas/Group" }, "saved_group": { "$ref": "#/components/schemas/Group" }, "supplemental_groups": { "$ref": "#/components/schemas/Group" }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" }, "elf": { "$ref": "#/components/schemas/Elf" }, "HostedFile": { "$ref": "#/components/schemas/File" }, "user": { "$ref": "#/components/schemas/User" }, "saved_user": { "$ref": "#/components/schemas/User" }, "real_user": { "$ref": "#/components/schemas/User" } }, "additionalProperties": false }, "ProcessParent": { "type": "object", "properties": { "pid": { "type": "integer", "format": "int64", "nullable": true }, "entity_id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "pgid": { "type": "integer", "format": "int64", "nullable": true }, "command_line": { "type": "string", "nullable": true }, "args": { "type": "array", "items": { "type": "string" }, "nullable": true }, "args_count": { "type": "integer", "format": "int64", "nullable": true }, "executable": { "type": "string", "nullable": true }, "title": { "type": "string", "nullable": true }, "thread": { "$ref": "#/components/schemas/ProcessThread" }, "start": { "type": "string", "format": "date-time", "nullable": true }, "uptime": { "type": "integer", "format": "int64", "nullable": true }, "working_directory": { "type": "string", "nullable": true }, "exit_code": { "type": "integer", "format": "int64", "nullable": true }, "end": { "type": "string", "format": "date-time", "nullable": true }, "interactive": { "type": "boolean", "nullable": true }, "same_as_process": { "type": "boolean", "nullable": true }, "env_vars": { "type": "string", "nullable": true }, "entry_meta": { "$ref": "#/components/schemas/ProcessEntryMeta" }, "tty": { "type": "string", "nullable": true }, "ElevationRequired": { "type": "boolean", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" }, "real_group": { "$ref": "#/components/schemas/Group" }, "saved_group": { "$ref": "#/components/schemas/Group" }, "supplemental_groups": { "$ref": "#/components/schemas/Group" }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" }, "elf": { "$ref": "#/components/schemas/Elf" }, "HostedFile": { "$ref": "#/components/schemas/File" }, "user": { "$ref": "#/components/schemas/User" }, "saved_user": { "$ref": "#/components/schemas/User" }, "real_user": { "$ref": "#/components/schemas/User" }, "group_leader": { "$ref": "#/components/schemas/ProcessGroupLeader" } }, "additionalProperties": false }, "ProcessPrevious": { "type": "object", "properties": { "pid": { "type": "integer", "format": "int64", "nullable": true }, "entity_id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "pgid": { "type": "integer", "format": "int64", "nullable": true }, "command_line": { "type": "string", "nullable": true }, "args": { "type": "array", "items": { "type": "string" }, "nullable": true }, "args_count": { "type": "integer", "format": "int64", "nullable": true }, "executable": { "type": "string", "nullable": true }, "title": { "type": "string", "nullable": true }, "thread": { "$ref": "#/components/schemas/ProcessThread" }, "start": { "type": "string", "format": "date-time", "nullable": true }, "uptime": { "type": "integer", "format": "int64", "nullable": true }, "working_directory": { "type": "string", "nullable": true }, "exit_code": { "type": "integer", "format": "int64", "nullable": true }, "end": { "type": "string", "format": "date-time", "nullable": true }, "interactive": { "type": "boolean", "nullable": true }, "same_as_process": { "type": "boolean", "nullable": true }, "env_vars": { "type": "string", "nullable": true }, "entry_meta": { "$ref": "#/components/schemas/ProcessEntryMeta" }, "tty": { "type": "string", "nullable": true }, "ElevationRequired": { "type": "boolean", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" }, "real_group": { "$ref": "#/components/schemas/Group" }, "saved_group": { "$ref": "#/components/schemas/Group" }, "supplemental_groups": { "$ref": "#/components/schemas/Group" }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" }, "elf": { "$ref": "#/components/schemas/Elf" }, "HostedFile": { "$ref": "#/components/schemas/File" }, "user": { "$ref": "#/components/schemas/User" }, "saved_user": { "$ref": "#/components/schemas/User" }, "real_user": { "$ref": "#/components/schemas/User" } }, "additionalProperties": false }, "ProcessSessionLeader": { "type": "object", "properties": { "pid": { "type": "integer", "format": "int64", "nullable": true }, "entity_id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "pgid": { "type": "integer", "format": "int64", "nullable": true }, "command_line": { "type": "string", "nullable": true }, "args": { "type": "array", "items": { "type": "string" }, "nullable": true }, "args_count": { "type": "integer", "format": "int64", "nullable": true }, "executable": { "type": "string", "nullable": true }, "title": { "type": "string", "nullable": true }, "thread": { "$ref": "#/components/schemas/ProcessThread" }, "start": { "type": "string", "format": "date-time", "nullable": true }, "uptime": { "type": "integer", "format": "int64", "nullable": true }, "working_directory": { "type": "string", "nullable": true }, "exit_code": { "type": "integer", "format": "int64", "nullable": true }, "end": { "type": "string", "format": "date-time", "nullable": true }, "interactive": { "type": "boolean", "nullable": true }, "same_as_process": { "type": "boolean", "nullable": true }, "env_vars": { "type": "string", "nullable": true }, "entry_meta": { "$ref": "#/components/schemas/ProcessEntryMeta" }, "tty": { "type": "string", "nullable": true }, "ElevationRequired": { "type": "boolean", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" }, "real_group": { "$ref": "#/components/schemas/Group" }, "saved_group": { "$ref": "#/components/schemas/Group" }, "supplemental_groups": { "$ref": "#/components/schemas/Group" }, "hash": { "$ref": "#/components/schemas/Hash" }, "pe": { "$ref": "#/components/schemas/Pe" }, "code_signature": { "$ref": "#/components/schemas/CodeSignature" }, "elf": { "$ref": "#/components/schemas/Elf" }, "HostedFile": { "$ref": "#/components/schemas/File" }, "user": { "$ref": "#/components/schemas/User" }, "saved_user": { "$ref": "#/components/schemas/User" }, "real_user": { "$ref": "#/components/schemas/User" }, "parent": { "$ref": "#/components/schemas/ProcessParent" } }, "additionalProperties": false }, "ProcessThread": { "type": "object", "properties": { "id": { "type": "integer", "format": "int64", "nullable": true }, "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Registry": { "type": "object", "properties": { "hive": { "type": "string", "nullable": true }, "key": { "type": "string", "nullable": true }, "value": { "type": "string", "nullable": true }, "path": { "type": "string", "nullable": true }, "data": { "$ref": "#/components/schemas/RegistryData" } }, "additionalProperties": false }, "RegistryData": { "type": "object", "properties": { "type": { "type": "string", "nullable": true }, "strings": { "type": "array", "items": { "type": "string" }, "nullable": true }, "bytes": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Related": { "type": "object", "properties": { "ip": { "type": "array", "items": { "type": "string" }, "nullable": true }, "user": { "type": "array", "items": { "type": "string" }, "nullable": true }, "hash": { "type": "array", "items": { "type": "string" }, "nullable": true }, "hosts": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "Remotepowershell": { "type": "object", "properties": { "Command": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Rule": { "type": "object", "properties": { "Identifier": { "type": "string", "nullable": true }, "OnDemand": { "type": "boolean", "nullable": true }, "Action": { "type": "string", "nullable": true }, "MatchedChild": { "type": "boolean", "nullable": true } }, "additionalProperties": false }, "Rulescript": { "type": "object", "properties": { "FileName": { "type": "string", "nullable": true }, "Publisher": { "type": "string", "nullable": true }, "Outcome": { "$ref": "#/components/schemas/RulescriptOutcome" } }, "additionalProperties": false }, "RulescriptOutcome": { "type": "object", "properties": { "Version": { "type": "string", "nullable": true }, "Name": { "type": "string", "nullable": true }, "RuleAffected": { "type": "boolean", "nullable": true }, "Result": { "type": "string", "nullable": true }, "Output": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Server": { "type": "object", "properties": { "address": { "type": "string", "nullable": true }, "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true }, "mac": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "registered_domain": { "type": "string", "nullable": true }, "top_level_domain": { "type": "string", "nullable": true }, "subdomain": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true }, "packets": { "type": "integer", "format": "int64", "nullable": true }, "nat": { "$ref": "#/components/schemas/ServerNat" }, "as": { "$ref": "#/components/schemas/As" }, "geo": { "$ref": "#/components/schemas/Geo" }, "user": { "$ref": "#/components/schemas/User" } }, "additionalProperties": false }, "ServerNat": { "type": "object", "properties": { "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Service": { "type": "object", "properties": { "environment": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "node": { "$ref": "#/components/schemas/ServiceNode" }, "type": { "type": "string", "nullable": true }, "state": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "ephemeral_id": { "type": "string", "nullable": true }, "address": { "type": "string", "nullable": true }, "origin": { "$ref": "#/components/schemas/ServiceOrigin" }, "target": { "$ref": "#/components/schemas/ServiceTarget" } }, "additionalProperties": false }, "ServiceNode": { "type": "object", "properties": { "name": { "type": "string", "nullable": true }, "role": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ServiceOrigin": { "type": "object", "properties": { "environment": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "node": { "$ref": "#/components/schemas/ServiceNode" }, "type": { "type": "string", "nullable": true }, "state": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "ephemeral_id": { "type": "string", "nullable": true }, "address": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ServiceTarget": { "type": "object", "properties": { "environment": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "node": { "$ref": "#/components/schemas/ServiceNode" }, "type": { "type": "string", "nullable": true }, "state": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "ephemeral_id": { "type": "string", "nullable": true }, "address": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Servicecontrol": { "type": "object", "properties": { "Service": { "$ref": "#/components/schemas/ServicecontrolService" } }, "additionalProperties": false }, "ServicecontrolService": { "type": "object", "properties": { "DisplayName": { "type": "string", "nullable": true }, "Name": { "type": "string", "nullable": true }, "Action": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Session": { "type": "object", "properties": { "Administrator": { "type": "boolean", "nullable": true }, "Locale": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true }, "PowerUser": { "type": "boolean", "nullable": true }, "WindowsSessionId": { "type": "string", "nullable": true }, "UILanguage": { "type": "string", "nullable": true }, "JITAdmin": { "$ref": "#/components/schemas/Jitadmin" } }, "additionalProperties": false }, "Source": { "type": "object", "properties": { "address": { "type": "string", "nullable": true }, "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true }, "mac": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "registered_domain": { "type": "string", "nullable": true }, "top_level_domain": { "type": "string", "nullable": true }, "subdomain": { "type": "string", "nullable": true }, "bytes": { "type": "integer", "format": "int64", "nullable": true }, "packets": { "type": "integer", "format": "int64", "nullable": true }, "nat": { "$ref": "#/components/schemas/SourceNat" }, "as": { "$ref": "#/components/schemas/As" }, "geo": { "$ref": "#/components/schemas/Geo" }, "user": { "$ref": "#/components/schemas/User" } }, "additionalProperties": false }, "SourceNat": { "type": "object", "properties": { "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true } }, "additionalProperties": false }, "Storeapp": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "Publisher": { "type": "string", "nullable": true }, "Version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Threat": { "type": "object", "properties": { "enrichments": { "type": "array", "items": { "$ref": "#/components/schemas/ThreatEnrichments" }, "nullable": true }, "feed": { "$ref": "#/components/schemas/ThreatFeed" }, "framework": { "type": "string", "nullable": true }, "group": { "$ref": "#/components/schemas/ThreatGroup" }, "indicator": { "$ref": "#/components/schemas/ThreatIndicator" }, "software": { "$ref": "#/components/schemas/ThreatSoftware" }, "tactic": { "$ref": "#/components/schemas/ThreatTactic" }, "technique": { "$ref": "#/components/schemas/ThreatTechnique" } }, "additionalProperties": false }, "ThreatEnrichments": { "type": "object", "properties": { "indicator": { "type": "string", "nullable": true }, "matched": { "$ref": "#/components/schemas/ThreatEnrichmentsMatched" } }, "additionalProperties": false }, "ThreatEnrichmentsMatched": { "type": "object", "properties": { "atomic": { "type": "string", "nullable": true }, "field": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "index": { "type": "string", "nullable": true }, "occurred": { "type": "string", "format": "date-time", "nullable": true }, "type": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ThreatFeed": { "type": "object", "properties": { "dashboard_id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "description": { "type": "string", "nullable": true }, "reference": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ThreatGroup": { "type": "object", "properties": { "alias": { "type": "array", "items": { "type": "string" }, "nullable": true }, "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "reference": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ThreatIndicator": { "type": "object", "properties": { "first_seen": { "type": "string", "format": "date-time", "nullable": true }, "last_seen": { "type": "string", "format": "date-time", "nullable": true }, "modified_at": { "type": "string", "format": "date-time", "nullable": true }, "sightings": { "type": "integer", "format": "int64", "nullable": true }, "type": { "type": "string", "nullable": true }, "description": { "type": "string", "nullable": true }, "scanner_stats": { "type": "integer", "format": "int64", "nullable": true }, "confidence": { "type": "string", "nullable": true }, "ip": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true }, "email": { "$ref": "#/components/schemas/ThreatIndicatorEmail" }, "marking": { "$ref": "#/components/schemas/ThreatIndicatorMarking" }, "reference": { "type": "string", "nullable": true }, "provider": { "type": "string", "nullable": true }, "x509": { "$ref": "#/components/schemas/X509" }, "as": { "$ref": "#/components/schemas/As" }, "file": { "$ref": "#/components/schemas/File" }, "geo": { "$ref": "#/components/schemas/Geo" }, "registry": { "$ref": "#/components/schemas/Registry" }, "url": { "$ref": "#/components/schemas/Url" } }, "additionalProperties": false }, "ThreatIndicatorEmail": { "type": "object", "properties": { "address": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ThreatIndicatorMarking": { "type": "object", "properties": { "tlp": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ThreatSoftware": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "alias": { "type": "array", "items": { "type": "string" }, "nullable": true }, "platforms": { "type": "array", "items": { "type": "string" }, "nullable": true }, "reference": { "type": "string", "nullable": true }, "type": { "type": "string", "nullable": true } }, "additionalProperties": false }, "ThreatTactic": { "type": "object", "properties": { "id": { "type": "array", "items": { "type": "string" }, "nullable": true }, "name": { "type": "array", "items": { "type": "string" }, "nullable": true }, "reference": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "ThreatTechnique": { "type": "object", "properties": { "id": { "type": "array", "items": { "type": "string" }, "nullable": true }, "name": { "type": "array", "items": { "type": "string" }, "nullable": true }, "reference": { "type": "array", "items": { "type": "string" }, "nullable": true }, "subtechnique": { "$ref": "#/components/schemas/ThreatTechniqueSubtechnique" } }, "additionalProperties": false }, "ThreatTechniqueSubtechnique": { "type": "object", "properties": { "id": { "type": "array", "items": { "type": "string" }, "nullable": true }, "name": { "type": "array", "items": { "type": "string" }, "nullable": true }, "reference": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "Tls": { "type": "object", "properties": { "version": { "type": "string", "nullable": true }, "version_protocol": { "type": "string", "nullable": true }, "cipher": { "type": "string", "nullable": true }, "curve": { "type": "string", "nullable": true }, "resumed": { "type": "boolean", "nullable": true }, "established": { "type": "boolean", "nullable": true }, "next_protocol": { "type": "string", "nullable": true }, "client": { "$ref": "#/components/schemas/TlsClient" }, "server": { "$ref": "#/components/schemas/TlsServer" } }, "additionalProperties": false }, "TlsClient": { "type": "object", "properties": { "ja3": { "type": "string", "nullable": true }, "server_name": { "type": "string", "nullable": true }, "supported_ciphers": { "type": "array", "items": { "type": "string" }, "nullable": true }, "subject": { "type": "string", "nullable": true }, "issuer": { "type": "string", "nullable": true }, "not_before": { "type": "string", "format": "date-time", "nullable": true }, "not_after": { "type": "string", "format": "date-time", "nullable": true }, "certificate_chain": { "type": "array", "items": { "type": "string" }, "nullable": true }, "certificate": { "type": "string", "nullable": true }, "hash": { "$ref": "#/components/schemas/TlsClientHash" }, "x509": { "$ref": "#/components/schemas/X509" } }, "additionalProperties": false }, "TlsClientHash": { "type": "object", "properties": { "md5": { "type": "string", "nullable": true }, "sha1": { "type": "string", "nullable": true }, "sha256": { "type": "string", "nullable": true } }, "additionalProperties": false }, "TlsServer": { "type": "object", "properties": { "ja3s": { "type": "string", "nullable": true }, "subject": { "type": "string", "nullable": true }, "issuer": { "type": "string", "nullable": true }, "not_before": { "type": "string", "format": "date-time", "nullable": true }, "not_after": { "type": "string", "format": "date-time", "nullable": true }, "certificate_chain": { "type": "array", "items": { "type": "string" }, "nullable": true }, "certificate": { "type": "string", "nullable": true }, "hash": { "$ref": "#/components/schemas/TlsServerHash" }, "x509": { "$ref": "#/components/schemas/X509" } }, "additionalProperties": false }, "TlsServerHash": { "type": "object", "properties": { "md5": { "type": "string", "nullable": true }, "sha1": { "type": "string", "nullable": true }, "sha256": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Token": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Trustedapplication": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "Version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Url": { "type": "object", "properties": { "original": { "type": "string", "nullable": true }, "full": { "type": "string", "nullable": true }, "scheme": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "registered_domain": { "type": "string", "nullable": true }, "top_level_domain": { "type": "string", "nullable": true }, "subdomain": { "type": "string", "nullable": true }, "port": { "type": "integer", "format": "int64", "nullable": true }, "path": { "type": "string", "nullable": true }, "query": { "type": "string", "nullable": true }, "extension": { "type": "string", "nullable": true }, "fragment": { "type": "string", "nullable": true }, "username": { "type": "string", "nullable": true }, "password": { "type": "string", "nullable": true } }, "additionalProperties": false }, "User": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "full_name": { "type": "string", "nullable": true }, "email": { "type": "string", "nullable": true }, "hash": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "roles": { "type": "array", "items": { "type": "string" }, "nullable": true }, "DomainIdentifier": { "type": "string", "nullable": true }, "DomainNetBIOSName": { "type": "string", "nullable": true }, "DefaultTimezoneOffset": { "type": "integer", "format": "int64", "nullable": true }, "LocalIdentifier": { "type": "integer", "format": "int64", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" }, "target": { "$ref": "#/components/schemas/UserTarget" }, "effective": { "$ref": "#/components/schemas/UserEffective" }, "changes": { "$ref": "#/components/schemas/UserChanges" } }, "additionalProperties": false }, "UserAgent": { "type": "object", "properties": { "original": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "device": { "$ref": "#/components/schemas/UserAgentDevice" }, "os": { "$ref": "#/components/schemas/Os" } }, "additionalProperties": false }, "UserAgentDevice": { "type": "object", "properties": { "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "UserChanges": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "full_name": { "type": "string", "nullable": true }, "email": { "type": "string", "nullable": true }, "hash": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "roles": { "type": "array", "items": { "type": "string" }, "nullable": true }, "DomainIdentifier": { "type": "string", "nullable": true }, "DomainNetBIOSName": { "type": "string", "nullable": true }, "DefaultTimezoneOffset": { "type": "integer", "format": "int64", "nullable": true }, "LocalIdentifier": { "type": "integer", "format": "int64", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" } }, "additionalProperties": false }, "UserEffective": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "full_name": { "type": "string", "nullable": true }, "email": { "type": "string", "nullable": true }, "hash": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "roles": { "type": "array", "items": { "type": "string" }, "nullable": true }, "DomainIdentifier": { "type": "string", "nullable": true }, "DomainNetBIOSName": { "type": "string", "nullable": true }, "DefaultTimezoneOffset": { "type": "integer", "format": "int64", "nullable": true }, "LocalIdentifier": { "type": "integer", "format": "int64", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" } }, "additionalProperties": false }, "UserTarget": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "full_name": { "type": "string", "nullable": true }, "email": { "type": "string", "nullable": true }, "hash": { "type": "string", "nullable": true }, "domain": { "type": "string", "nullable": true }, "roles": { "type": "array", "items": { "type": "string" }, "nullable": true }, "DomainIdentifier": { "type": "string", "nullable": true }, "DomainNetBIOSName": { "type": "string", "nullable": true }, "DefaultTimezoneOffset": { "type": "integer", "format": "int64", "nullable": true }, "LocalIdentifier": { "type": "integer", "format": "int64", "nullable": true }, "group": { "$ref": "#/components/schemas/Group" } }, "additionalProperties": false }, "Vlan": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Vulnerability": { "type": "object", "properties": { "classification": { "type": "string", "nullable": true }, "enumeration": { "type": "string", "nullable": true }, "reference": { "type": "string", "nullable": true }, "score": { "$ref": "#/components/schemas/VulnerabilityScore" }, "category": { "type": "array", "items": { "type": "string" }, "nullable": true }, "description": { "type": "string", "nullable": true }, "id": { "type": "string", "nullable": true }, "scanner": { "$ref": "#/components/schemas/VulnerabilityScanner" }, "severity": { "type": "string", "nullable": true }, "report_id": { "type": "string", "nullable": true } }, "additionalProperties": false }, "VulnerabilityScanner": { "type": "object", "properties": { "vendor": { "type": "string", "nullable": true } }, "additionalProperties": false }, "VulnerabilityScore": { "type": "object", "properties": { "base": { "type": "number", "format": "double", "nullable": true }, "temporal": { "type": "number", "format": "double", "nullable": true }, "environmental": { "type": "number", "format": "double", "nullable": true }, "version": { "type": "string", "nullable": true } }, "additionalProperties": false }, "Workstyle": { "type": "object", "properties": { "Name": { "type": "string", "nullable": true }, "Description": { "type": "string", "nullable": true }, "Identifier": { "type": "string", "nullable": true } }, "additionalProperties": false }, "X509": { "type": "object", "properties": { "version_number": { "type": "string", "nullable": true }, "serial_number": { "type": "string", "nullable": true }, "issuer": { "$ref": "#/components/schemas/X509Issuer" }, "signature_algorithm": { "type": "string", "nullable": true }, "not_before": { "type": "string", "format": "date-time", "nullable": true }, "not_after": { "type": "string", "format": "date-time", "nullable": true }, "subject": { "$ref": "#/components/schemas/X509Subject" }, "public_key_algorithm": { "type": "string", "nullable": true }, "public_key_size": { "type": "integer", "format": "int64", "nullable": true }, "public_key_exponent": { "type": "integer", "format": "int64", "nullable": true }, "public_key_curve": { "type": "string", "nullable": true }, "alternative_names": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "X509Issuer": { "type": "object", "properties": { "distinguished_name": { "type": "string", "nullable": true }, "common_name": { "type": "array", "items": { "type": "string" }, "nullable": true }, "organizational_unit": { "type": "array", "items": { "type": "string" }, "nullable": true }, "organization": { "type": "array", "items": { "type": "string" }, "nullable": true }, "locality": { "type": "array", "items": { "type": "string" }, "nullable": true }, "state_or_province": { "type": "array", "items": { "type": "string" }, "nullable": true }, "country": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "X509Subject": { "type": "object", "properties": { "distinguished_name": { "type": "string", "nullable": true }, "common_name": { "type": "array", "items": { "type": "string" }, "nullable": true }, "organizational_unit": { "type": "array", "items": { "type": "string" }, "nullable": true }, "organization": { "type": "array", "items": { "type": "string" }, "nullable": true }, "locality": { "type": "array", "items": { "type": "string" }, "nullable": true }, "state_or_province": { "type": "array", "items": { "type": "string" }, "nullable": true }, "country": { "type": "array", "items": { "type": "string" }, "nullable": true } }, "additionalProperties": false }, "_event": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "code": { "type": "string", "nullable": true }, "kind": { "type": "string", "nullable": true }, "category": { "type": "array", "items": { "type": "string" }, "nullable": true }, "action": { "type": "string", "nullable": true }, "outcome": { "type": "string", "nullable": true }, "type": { "type": "array", "items": { "type": "string" }, "nullable": true }, "module": { "type": "string", "nullable": true }, "dataset": { "type": "string", "nullable": true }, "provider": { "type": "string", "nullable": true }, "severity": { "type": "integer", "format": "int64", "nullable": true }, "original": { "type": "string", "nullable": true }, "hash": { "type": "string", "nullable": true }, "duration": { "type": "integer", "format": "int64", "nullable": true }, "sequence": { "type": "integer", "format": "int64", "nullable": true }, "timezone": { "type": "string", "nullable": true }, "created": { "type": "string", "format": "date-time", "nullable": true }, "start": { "type": "string", "format": "date-time", "nullable": true }, "end": { "type": "string", "format": "date-time", "nullable": true }, "risk_score": { "type": "number", "format": "double", "nullable": true }, "risk_score_norm": { "type": "number", "format": "double", "nullable": true }, "ingested": { "type": "string", "format": "date-time", "nullable": true }, "reference": { "type": "string", "nullable": true }, "url": { "type": "string", "nullable": true }, "reason": { "type": "string", "nullable": true }, "agent_id_status": { "type": "string", "nullable": true }, "ReceivedAt": { "type": "string", "format": "date-time", "nullable": true } }, "additionalProperties": false }, "_rule": { "type": "object", "properties": { "id": { "type": "string", "nullable": true }, "uuid": { "type": "string", "nullable": true }, "version": { "type": "string", "nullable": true }, "name": { "type": "string", "nullable": true }, "description": { "type": "string", "nullable": true }, "category": { "type": "string", "nullable": true }, "ruleset": { "type": "string", "nullable": true }, "reference": { "type": "string", "nullable": true }, "author": { "type": "array", "items": { "type": "string" }, "nullable": true }, "license": { "type": "string", "nullable": true } }, "additionalProperties": false } }, "securitySchemes": { "bearer": { "type": "http", "scheme": "bearer", "bearerFormat": "JWT" }, "oauth2": { "type": "oauth2", "flows": { "clientCredentials": { "tokenUrl": "https://sneakpeek-services.epm.bt3ng.com/oauth/connect/token", "scopes": { "urn:management:api": "Management API scope" } } } } } }, "x-readme": {} } ```