Method: iocs.findFirstAndLastSeen

Full name: projects.locations.instances.iocs.findFirstAndLastSeen

FindFirstAndLastSeen for an Ioc.

HTTP request

GET https://chronicle.googleapis.com/v1alpha/{name}:findFirstAndLastSeen

Path parameters

Parameters
name

string

Required. projects/{project}/locations/{location}/instances/{instance}/iocs/{ioc}

Request body

The request body must be empty.

Response body

Response message to find first and last seen of an Ioc

If successful, the response body contains data with the following structure:

JSON representation 
{
  "first_seen_time": string,
  "last_seen_time": string
}
Fields
first_seen_time

string (Timestamp format)

First seen timestamp of an Ioc in the corporation

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
last_seen_time

string (Timestamp format)

Last seen timestamp of an Ioc in the corporation

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

  • chronicle.iocs.findFirstAndLastSeen

For more information, see the IAM documentation.