---
title: "# Detection Content Rule Details"
method: GET
path: "/v1/mitigation/detection-content/{source}/rules/{ruleId}"
tags: ["Mitigation"]
---

# # Detection Content Rule Details

`GET /v1/mitigation/detection-content/{source}/rules/{ruleId}`

Returns the details of the detection content rule for the given ruleId and content source.

## Path parameters

- `source` string, required
- `ruleId` string, required

## Response `200`

RuleDetailResponse

- DetectionContentRuleDetailCustomerApiResponse
  - `actions` ActionWithCategoryDTO[]
    - `category` string
    - `display_id` integer
    - `id` integer
    - `name` string
  - `overview` DetectionContentRuleDetailOverviewCustomerApiResponse
    - `author` string
    - `description` string
    - `deviceName` string
    - `falsePositives` string[]
    - `id` string
    - `integrationConfigurations` DetectionContentRuleDetailIntegrationConfigurations
      - `crowdStrike` DetectionContentRuleDetailCrowdStrikeConfiguration
        - `ioaDetails` CrowdStrikeIOARuleResponse
          - `commandLine` string
          - `connectionType` string
          - `filePath` string
          - `fileType` string
          - `grandparentCommandLine` string
          - `grandparentImageFileName` string
          - `imageFileName` string
          - `parentCommandLine` string
          - `parentImageFileName` string
          - `platform` string
          - `remoteIPAddress` string
          - `remoteTCPUDPPort` string
          - `ruleAction` string
          - `ruleQuery` string
          - `ruleType` string
        - `logScaleQuery` string
    - `logSource` LogSourceDTO
      - `policies` string[]
      - `productName` string[]
      - `service` string
    - `mitre` TechniqueInfoDTO[]
      - `mitreId` string
      - `name` string
      - `url` string
    - `name` string
    - `query` string
    - `releaseDate` integer
    - `score` integer
    - `severity` string
    - `type` string
    - `updateDate` integer

## Other responses

- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/versions/cb0d02ee28f8/schema)