Turbinia Evidence
Query Evidence
Queries evidence in Redis that have the specified attribute value.
Args: attribute_name (str): Name of attribute to be queried. attribute_value (str): Value the attribute must have. output Optional(str): Sets how the evidence found will be output.
Returns: summary (dict): Summary of all evidences and their content.
Raises: HTTPException: If no matching evidence is found.
get/api/evidence/query
Query parameters
attribute_name'_name' | 'cloud_only' | 'context_dependent' | 'copyable' | 'creation_time' | 'description' | 'has_child_evidence' | 'last_update' | 'local_path' | 'mount_path' | 'parent_evidence' | 'request_id' | 'resource_id' | 'resource_tracked' | 'save_metadata' | 'saved_path' | 'saved_path_type' | 'size' | 'source' | 'source_path' | 'type' | 'tasks'
attribute_valuestring required
output'keys' | 'content' | 'count'
Response
Successful Response
{"stackTrail":"paths:/api/evidence/query:get:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}