Method: legacy.legacySearchArtifactIoCDetails

Full name: projects.locations.instances.legacy.legacySearchArtifactIoCDetails

Rpc to search for IoC details for a particular artifact.

HTTP request


Path parameters

Parameters
instance

string

Required. Chronicle instance this request is sent to. Format: projects/{project}/locations/{location}/instances/{instance}

Query parameters

Parameters
artifactIndicator

object (ArtifactIndicator)

Required. Artifact of interest.

Request body

The request body must be empty.

Response body

Response message for SearchArtifactIoCDetailsResponse. NEXT TAG: 4

If successful, the response body contains data with the following structure:

JSON representation 
{
  "feeds": [
    {
      object (Feed)
    }
  ]
}
Fields
feeds[]

object (Feed)

Empty if this domain wasn't identified as an IoC by any feed.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacies.legacySearchArtifactIoCDetails

For more information, see the IAM documentation.

Feed

JSON representation 
{
  "metadata": {
    object (FeedMetadata)
  },
  "iocs": [
    {
      object (IocEvent)
    }
  ]
}
Fields
metadata

object (FeedMetadata)
iocs[]

object (IocEvent)

FeedMetadata

JSON representation 
{
  "title": string,
  "description": string,
  "link": {
    object (Link)
  },
  "confidenceScoreBucket": {
    object (IntRange)
  }
}
Fields
title

string
description

string
confidenceScoreBucket

object (IntRange)