diff --git a/content/en/api/v2/security-monitoring/examples.json b/content/en/api/v2/security-monitoring/examples.json index 38fd35a855d..5718f51d309 100644 --- a/content/en/api/v2/security-monitoring/examples.json +++ b/content/en/api/v2/security-monitoring/examples.json @@ -3222,7 +3222,7 @@ } ] }, - "html": "
\n
\n
\n
\n

data

\n
\n

[object]

\n

A list of critical assets objects.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data

\n
\n

[object]

\n

A list of critical assets objects.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" }, "403": { "json": { @@ -3279,7 +3279,7 @@ "type": "critical_assets" } }, - "html": "
\n
\n
\n
\n

data

\n
\n

object

\n

The critical asset's properties.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data

\n
\n

object

\n

The critical asset's properties.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" }, "400": { "json": { @@ -3340,7 +3340,7 @@ "type": "critical_assets" } }, - "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Object for a single critical asset.

\n
\n
\n
\n
\n
\n

attributes [required]

\n
\n

object

\n

Object containing the attributes of the critical asset to be created.

\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled. Defaults to true if not specified.

default: true

\n
\n \n
\n
\n
\n
\n
\n

query [required]

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query [required]

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity [required]

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

type [required]

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

Object for a single critical asset.

\n
\n
\n
\n
\n
\n

attributes [required]

\n
\n

object

\n

Object containing the attributes of the critical asset to be created.

\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled. Defaults to true if not specified.

default: true

\n
\n \n
\n
\n
\n
\n
\n

query [required]

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query [required]

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity [required]

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

type [required]

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" } }, "GetCriticalAssetsAffectingRule": { @@ -3377,7 +3377,7 @@ } ] }, - "html": "
\n
\n
\n
\n

data

\n
\n

[object]

\n

A list of critical assets objects.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data

\n
\n

[object]

\n

A list of critical assets objects.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" }, "403": { "json": { @@ -3475,7 +3475,7 @@ "type": "critical_assets" } }, - "html": "
\n
\n
\n
\n

data

\n
\n

object

\n

The critical asset's properties.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data

\n
\n

object

\n

The critical asset's properties.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" }, "403": { "json": { @@ -3540,7 +3540,7 @@ "type": "critical_assets" } }, - "html": "
\n
\n
\n
\n

data

\n
\n

object

\n

The critical asset's properties.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data

\n
\n

object

\n

The critical asset's properties.

\n
\n
\n
\n
\n
\n

attributes

\n
\n

object

\n

The attributes of the critical asset.

\n
\n
\n
\n
\n
\n

creation_author_id

\n
\n

int64

\n

ID of user who created the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creation_date

\n
\n

int64

\n

A Unix millisecond timestamp given the creation date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

creator

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_author_id

\n
\n

int64

\n

ID of user who updated the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

update_date

\n
\n

int64

\n

A Unix millisecond timestamp given the update date of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

updater

\n
\n

object

\n

A user.

\n
\n
\n
\n
\n
\n

handle

\n
\n

string

\n

The handle of the user.

\n
\n \n
\n
\n
\n
\n
\n

name

\n
\n

string

\n

The name of the user.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset; it starts at 1, and is incremented at each update.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

id

\n
\n

string

\n

The ID of the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

type

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" }, "400": { "json": { @@ -3606,7 +3606,7 @@ "type": "critical_assets" } }, - "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

The new critical asset properties; partial updates are supported.

\n
\n
\n
\n
\n
\n

attributes [required]

\n
\n

object

\n

The critical asset properties to be updated.

\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset being updated. Used for optimistic locking to prevent concurrent modifications.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

type [required]

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" + "html": "
\n
\n
\n
\n

data [required]

\n
\n

object

\n

The new critical asset properties; partial updates are supported.

\n
\n
\n
\n
\n
\n

attributes [required]

\n
\n

object

\n

The critical asset properties to be updated.

\n
\n
\n
\n
\n
\n

enabled

\n
\n

boolean

\n

Whether the critical asset is enabled.

\n
\n \n
\n
\n
\n
\n
\n

query

\n
\n

string

\n

The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.

\n
\n \n
\n
\n
\n
\n
\n

rule_query

\n
\n

string

\n

The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.

\n
\n \n
\n
\n
\n
\n
\n

severity

\n
\n

enum

\n

Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op

\n
\n \n
\n
\n
\n
\n
\n

tags

\n
\n

[string]

\n

List of tags associated with the critical asset.

\n
\n \n
\n
\n
\n
\n
\n

version

\n
\n

int32

\n

The version of the critical asset being updated. Used for optimistic locking to prevent concurrent modifications.

\n
\n \n
\n
\n
\n
\n
\n
\n
\n

type [required]

\n
\n

enum

\n

The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets

default: critical_assets

\n
\n \n
\n
\n
\n
" } }, "ListSecurityFilters": { diff --git a/data/api/v2/full_spec.yaml b/data/api/v2/full_spec.yaml index b498c7e069c..21c7e4c4860 100644 --- a/data/api/v2/full_spec.yaml +++ b/data/api/v2/full_spec.yaml @@ -56015,7 +56015,7 @@ components: $ref: "#/components/schemas/SecurityMonitoringCriticalAsset" type: object SecurityMonitoringCriticalAssetSeverity: - description: Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. + description: Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). enum: - info - low @@ -56024,6 +56024,7 @@ components: - critical - increase - decrease + - no-op example: increase type: string x-enum-varnames: @@ -56034,6 +56035,7 @@ components: - CRITICAL - INCREASE - DECREASE + - NO_OP SecurityMonitoringCriticalAssetType: default: critical_assets description: The type of the resource. The value should always be `critical_assets`.