v1

latestOpenAPI 3.0.02026-07-17166300328.1 KB

Sightings

Add sightings of a list of values

post/sightings/add

Request body

valuesAttributeValue[]

timestampstring nullable

Example request

{
  "values": [
    "127.0.0.1"
  ],
  "timestamp": "1617875568",
  "filters": {
    "value": "127.0.0.1",
    "value1": "127.0.0.1",
    "value2": "127.0.0.1",
    "org": "12345",
    "tags": [
      "tlp:amber"
    ],
    "searchall": "malware",
    "eventid": "12345",
    "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "publish_timestamp": "1617875568",
    "timestamp": "1617875568",
    "attribute_timestamp": "1617875568",
    "event_timestamp": "1617875568",
    "sharinggroup": [
      "1"
    ],
    "requested_attributes": [
      "id"
    ],
    "attackGalaxy": "mitre-attack",
    "object_relation": "filepath",
    "modelOverrides": {
      "lifetime": 3,
      "decay_speed": 2.3,
      "threshold": 30,
      "default_base_score": 80,
      "base_score_config": {
        "estimative-language:confidence-in-analytic-judgment": 0.25,
        "estimative-language:likelihood-probability": 0.25,
        "phishing:psychological-acceptability": 0.25,
        "phishing:state": 0.2
      }
    }
  }
}

Response

Add sighting response

idstring

attribute_idstring

event_idstring

org_idstring

date_sightingstring

uuidstring uuid

sourcestring

typestring

attribute_uuidstring uuid

Example response

{
  "id": "12345",
  "attribute_id": "12345",
  "event_id": "12345",
  "org_id": "12345",
  "date_sighting": "1617875568",
  "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
  "attribute_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
  "Organisation": {
    "id": "12345",
    "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "name": "ORGNAME"
  }
}