Details of the given batch of threat IDs
Details of the given batch of threat IDs. Supports a maximum of 1000 IDs per request.
Request body
Response
Success
ID of the service account to which the threat/vulnerability belongs to.
Cloud Provider of the service account
Tenant ID where the service account belongs to
ID of the resource where the threat/vulnerability is observed
Name of the resource where the threat/vulnerability is observed
Category of the resource to which the threat/vulnerability belongs to.
Type of the resource to which the threat/vulnerability belongs to.
Resource to which the threat/vulnerability belongs to.
Region the impacted resource is located in.
Location the impacted resource is located in.
Resource Group of the resource to which the threat/vulnerability belongs to.
Severity of the threat/vulnerability
Status of the threats/vulnerabilities
Source of the threat/vulnerability
Issue Type of the threat/vulnerability
Unique id for threat/vulnerability as provided by the cloud provider
Title of the threat/vulnerability
Date and time when the threat/vulnerability was created in corestack
Date and time when the threat/vulnerability was updated in corestack
Description of the threat/vulnerability
Date and time when the threat/vulnerability was detected
Recommendation for the threat/vulnerability
Recommended remediation for the threat/vulnerability
Source data of the threat/vulnerability captured from the cloud.
List of threat intents, representing the potential goals or purposes behind the threat, such as "Persistence", "CredentialAccess", or "DefenseEvasion". These help categorize and understand the threat behavior.
Unique identifier of the threat.
Example response
[
{
"cloud_provider": "AWS",
"severity": "Critical",
"status": "active"
}
]