Sign in

v1

latestOpenAPI 3.1.12026-07-242899061.7 MB
Auto Sigma

Create a Auto Sigma job

Generate Sigma detection rules from observed behavioral patterns across malware samples.

post/v1/auto-sigma/jobs

Request body

namestring required

The name of the Auto Sigma job.

querystring required

The query used to select files to build rules for

start_datestring date required

Earliest date to include in the query (cannot be before 2023-11-01)

end_datestring date

Latest date to include in the query, defaults to today in UTC

Example request

{
  "name": "Example Job",
  "query": "sample.tags == \"family:redline\"",
  "start_date": "2024-11-01",
  "end_date": "2024-11-30"
}

Response

Successful Response

job_idstring required