Intezer Analyze
Intezer Analyze is a cybersecurity platform that provides advanced malware analysis and threat intelligence through genetic code analysis.
Intezer Analyze is a powerful malware analysis platform that provides deep insights into the genetic origins of software, identifying code reuse and detecting threats. This connector allows Swimlane Turbine users to automate the submission and analysis of files and hashes, retrieve analysis results, and manage files within Intezer Analyze. By integrating with Intezer Analyze, Swimlane Turbine users can enhance their security operations with automated malware analysis, enabling faster threat detection and response, and improving overall security posture.
The Intezer Analyze Connector integrates with Swimlane to perform malware analysis of suspicious files and a variety of automated investigation process operations.
Asset Setup or Prerequisites
Before you can use the Intezer Analyze connector for Turbine, you'll need access to the Intezer Analyze API. This requires the following:
- an API key authentication using the following parameters:
- URL: The endpoint URL for accessing Intezer Analyze services.
- API Key: A unique key provided by Intezer for authenticating API requests.
Capabilities
This plugin provides the following capabilities:
- Analyze File
- Analyze by Hash
- Delete File by Hash
- Delete Index by Hash
- Download File
- Generate Vaccine
- Get Alert By ID
- Get Analysis Result
- Get Latest Hash Result
- Get Root Analysis Related Samples
- Get Sub Analysis Related Samples
- Get Sub-Analysis IDs
- Get Sub-Analyses Metadata
- Index Uploaded File
- Label File ... and so on
Notes
- For more information on Intezer Analyze Connector is found at: Intezer Analyze Main Site
- For more information on Intezer Analyze Authentication, check here
Configurations
Intezer Analyze API Key Authentication
Authenticates using an Intezer Analyze API Key
Configuration Parameters
Parameter | Description | Type | Required |
|---|---|---|---|
url | A URL to the target host. | string | Required |
apikey | API key | string | Required |
verify_ssl | Verify SSL certificate | boolean | Optional |
http_proxy | A proxy to route requests through. | string | Optional |
Actions
Analyze by Hash
Submit a file's hash to Intezer Analyze for analysis without uploading the actual file. Requires the hash in JSON body.
Endpoint
- URL: /api/v2-0/analyze-by-hash
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
hash | string | Optional | Parameter for Analyze by Hash |
file_name | string | Optional | Name of the resource |
code_item_type | string | Optional | Type of the resource |
disable_dynamic_execution | boolean | Optional | Parameter for Analyze by Hash |
disable_static_extraction | boolean | Optional | Parameter for Analyze by Hash |
sandbox_command_line_arguments | string | Optional | Parameter for Analyze by Hash |
Input Example
{"json_body":{"hash":"stringstringstringstringstringst","file_name":"malicious.exe","code_item_type":"file","disable_dynamic_execution":false,"disable_static_extraction":false,"sandbox_command_line_arguments":"string"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
status | string | Status value |
result_url | string | URL endpoint for the request |
result | object | Result of the operation |
Output Example
{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"status":"succeeded","result_url":"string","result":null}}
Analyze File
Submit a file for analysis in Intezer Analyze using the provided attachments.
Endpoint
- URL: /api/v2-0/analyze
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
attachments | object | Required | Parameter for Analyze File |
Input Example
{"attachments":{}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
status | string | Status value |
result_url | string | URL endpoint for the request |
result | object | Result of the operation |
Output Example
{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"status":"succeeded","result_url":"string","result":null}}
Delete File by Hash
Delete a private file from Intezer's storage using its hash value.
Endpoint
- URL: /api/v2-0/files/{{hash_value}}
- Method: DELETE
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.hash_value | string | Required | Parameters for the Delete File by Hash action |
Input Example
{"path_parameters":{"hash_value":"sha256"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
status | string | Status value |
result_url | string | URL endpoint for the request |
result | object | Result of the operation |
Output Example
{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"status":"succeeded","result_url":"string","result":null}}
Delete Index by Hash
Delete the private indexing for a file in Intezer Analyze using its SHA256 hash.
Endpoint
- URL: /api/v2-0/files/{{sha256}}/index
- Method: DELETE
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.sha256 | string | Required | Parameters for the Delete Index by Hash action |
Input Example
{"path_parameters":{"sha256":"sha256"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result_url | string | URL endpoint for the request |
Output Example
{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result_url":"/tasks/5ffa5925-b651-4cca-9e15-92ee84ea4ad3"}}
Download a File
Download the SHA256 equivalent of a file from Intezer Analyze for further investigation. Requires path parameter 'sha256'.
Endpoint
- URL: /api/v2-0/files/{{sha256}}/download
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
headers | object | Optional | HTTP headers for the request |
headers.Accept | string | Optional | HTTP headers for the request |
path_parameters.sha256 | string | Required | Parameters for the Download a File action |
Input Example
{"headers":{"Accept":"application/octet-stream"},"path_parameters":{"sha256":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{}}
Generate Vaccine
Generate a vaccine for a specific file in Intezer Analyze using the analysis ID as a path parameter.
Endpoint
- URL: /api/v2-0/analyses/{{analysis_id}}/sub-analyses/root/generate-vaccine
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.analysis_id | string | Required | Parameters for the Generate Vaccine action |
format | string | Optional | Parameter for Generate Vaccine |
Input Example
{"json_body":{"format":"yara"},"path_parameters":{"analysis_id":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | string | Result of the operation |
result_url | string | URL endpoint for the request |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":"rule Intezer_Vaccine_bf293bda73c5b4c1ec66561ad20d7e2bc6692d051282d35ce8b7b7020c7...","result_url":"/analyses/0833e33b-2dcd-4d48-a853-8b4822675911/sub-analyses/e1aba630-e390-4964-b...","status":"succeeded"}}
Get Alert By ID
Retrieve triage and response information for an ingested alert in Intezer Analyze using its alert ID.
Endpoint
- URL: /api/v2-0/alerts/get-by-id
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
alert_id | string | Optional | The unique identifier of the alert to retrieve. |
Input Example
{"json_body":{"alert_id":"ed638299999999862495_-1864999299"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result.alert_id | string | Unique identifier |
result.intezer_alert_url | string | URL endpoint for the request |
result.alert | object | Result of the operation |
result.alert.alert_id | string | Unique identifier |
result.alert.alert_title | string | Result of the operation |
result.alert.alert_url | string | URL endpoint for the request |
result.alert.creation_time | string | Result of the operation |
result.alert.creation_time_display | string | Result of the operation |
result.alert.severity | string | Result of the operation |
result.alert.severity_display | string | Result of the operation |
result.alert.is_mitigated | boolean | Result of the operation |
result.alert.mitigation_status_display | string | Status value |
result.alert.device | object | Result of the operation |
result.alert.device.id | string | Unique identifier |
result.alert.device.hostname | string | Name of the resource |
result.alert.device.os_type | string | Type of the resource |
result.alert.device.os_name | string | Name of the resource |
result.triage_result | object | Result of the operation |
result.triage_result.alert_verdict | string | Result of the operation |
result.triage_result.alert_verdict_display | string | Result of the operation |
result.triage_result.risk_level | string | Result of the operation |
result.triage_result.risk_level_display | string | Result of the operation |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"alert_id":"ed638299999999862495_-1864999299","intezer_alert_url":"https://analyze.intezer.com/alerts/ed638299999999862495_-1864999299","alert":{},"triage_result":{},"source":"cs","source_display":"CrowdStrike","source_type":"edr","status":"done"},"status":"succeeded"}}
Get Analysis Result
Retrieve a summary of file analysis results in Intezer Analyze using the analysis_id path parameter.
Endpoint
- URL: /api/v2-0/analyses/{{analysis_id}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.analysis_id | string | Required | Parameters for the Get Analysis Result action |
Input Example
{"path_parameters":{"analysis_id":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result.analysis_id | string | Unique identifier |
result.analysis_time | string | Result of the operation |
result.analysis_url | string | URL endpoint for the request |
result.family_id | string | Unique identifier |
result.family_name | string | Name of the resource |
result.file_name | string | Name of the resource |
result.is_private | boolean | Result of the operation |
result.labels | array | Result of the operation |
result.sha256 | string | Result of the operation |
result.sub_verdict | string | Result of the operation |
result.verdict | string | Result of the operation |
result_url | string | URL endpoint for the request |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"analysis_id":"0833e33b-2dcd-4d48-a853-8b4822675911","analysis_time":"Wed, 17 Oct 2018 15:16:45 GMT","analysis_url":"https://analyze.intezer.com/analyses/0833e33b-2dcd-4d48-a853-8b4822675911","family_id":"0b13c0d4-7779-4c06-98fa-4d33ca98f8a9","family_name":"WannaCry","file_name":"file.exe","is_private":true,"labels":[],"sha25...
Get Latest Hash Result
Retrieve the latest analysis results for a file in Intezer Analyze by specifying its hash value.
Endpoint
- URL: /api/v2-0/files/{{hash_value}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.hash_value | string | Required | Parameters for the Get Latest Hash Result action |
should_get_only_private_analysis | string | Optional | Parameter for Get Latest Hash Result |
should_get_only_composed_analysis | string | Optional | Parameter for Get Latest Hash Result |
Input Example
{"json_body":{"should_get_only_private_analysis":"false","should_get_only_composed_analysis":"true"},"path_parameters":{"hash_value":"SHA256"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result.analysis_id | string | Unique identifier |
result.analysis_time | string | Result of the operation |
result.analysis_url | string | URL endpoint for the request |
result.family_id | string | Unique identifier |
result.family_name | string | Name of the resource |
result.file_name | string | Name of the resource |
result.is_private | boolean | Result of the operation |
result.labels | array | Result of the operation |
result.sha256 | string | Result of the operation |
result.sub_verdict | string | Result of the operation |
result.verdict | string | Result of the operation |
result_url | string | URL endpoint for the request |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"analysis_id":"0833e33b-2dcd-4d48-a853-8b4822675911","analysis_time":"Wed, 17 Oct 2018 15:16:45 GMT","analysis_url":"https://analyze.intezer.com/analyses/0833e33b-2dcd-4d48-a853-8b4822675911","family_id":"0b13c0d4-7779-4c06-98fa-4d33ca98f8a9","family_name":"WannaCry","file_name":"file.exe","is_private":true,"labels":[],"sha25...
Get Root Analysis Related Samples
Get a list of public samples from the Intezer Genome Database that share code with the detected family in the analyzed file. Requires analysis_id and family_id as path parameters.
Endpoint
- URL: /api/v2-0/analyses/{{analysis_id}}/sub-analyses/root/code-reuse/families/{{family_id}}/find-related-files
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.analysis_id | string | Required | Parameters for the Get Root Analysis Related Samples action |
path_parameters.family_id | string | Required | Parameters for the Get Root Analysis Related Samples action |
Input Example
{"path_parameters":{"analysis_id":"string","family_id":"string"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result.files | array | Result of the operation |
result.files.reused_gene_count | number | Result of the operation |
result.files.sha256 | string | Result of the operation |
result.files.size_in_bytes | number | Result of the operation |
result_url | string | URL endpoint for the request |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"files":[]},"result_url":"/analyses/513555bd-1113-4079-80ff-c968e40bea16/sub-analyses/479d81e8-b6ba-4c13-8...","status":"succeeded"}}
Get Sub Analyses Metadata
Get the root analysis sample's metadata in Intezer Analyze using the analysis ID as a path parameter.
Endpoint
- URL: /api/v2-0/analyses/{{analysis_id}}/sub-analyses/root/metadata
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.analysis_id | string | Required | Parameters for the Get Sub Analyses Metadata action |
Input Example
{"path_parameters":{"analysis_id":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
architecture | string | Output field: architecture |
company | string | Output field: company |
compilation_timestamp | string | Output field: compilation_timestamp |
file_type | string | Type of the resource |
md5 | string | Output field: md5 |
original_filename | string | Name of the resource |
product | string | Output field: product |
product_version | string | Output field: product_version |
sha1 | string | Output field: sha1 |
sha256 | string | Output field: sha256 |
size_in_bytes | number | Output field: size_in_bytes |
ssdeep | string | Output field: ssdeep |
indicators | array | Output field: indicators |
indicators.name | string | Name of the resource |
indicators.classification | string | Output field: indicators.classification |
indicators.additional_info | string | Output field: indicators.additional_info |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"architecture":"i386","company":"Microsoft Corporation","compilation_timestamp":"2014:02:06 12:37:44+00:00","file_type":"pe","md5":"ec7e3cfaeaac0401316d66e964be684e","original_filename":"cryptsp.dll","product":"Microsoft\u00ae Windows\u00ae Operating System","product_version":"6.1.7600.16385","sha1":"dbda26c8dfbd511fd048a89a0d0dd300df3...
Get Sub Analysis IDs
Retrieve a list of sub-analysis IDs for a given analysis ID in Intezer Analyze, including the root file's sub-analysis ID. Requires the analysis_id as a path parameter.
Endpoint
- URL: /api/v2-0/analyses/{{analysis_id}}/sub-analyses
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.analysis_id | string | Required | Parameters for the Get Sub Analysis IDs action |
Input Example
{"path_parameters":{"analysis_id":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
sub_analyses | array | Output field: sub_analyses |
sub_analyses.sha256 | string | Output field: sub_analyses.sha256 |
sub_analyses.source | string | Output field: sub_analyses.source |
sub_analyses.sub_analysis_id | string | Unique identifier |
sub_analyses.extraction_info | object | Output field: sub_analyses.extraction_info |
sub_analyses.extraction_info.dropped_path | string | Output field: sub_analyses.extraction_info.dropped_path |
sub_analyses.extraction_info.parent_file_sha256 | string | Output field: sub_analyses.extraction_info.parent_file_sha256 |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"sub_analyses":[{"sha256":"14ca4a614156e924d077e1bf6709cd24796a1ddc92aa1ac9c0b85103fea943bd","source":"root","sub_analysis_id":"ae0ad225-4f37-43ce-8ffd-a7771b896a36"},{"extraction_info":{"collected_from":"memory","processes":[{"module_path":"C:\\Users\\WMJI\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ddnvojbl....
Get Sub Analysis Related Samples
Retrieve a list of public samples from the Intezer Genome Database that share code with the detected family in the analyzed file. Requires analysis_id, family_id, and sub_analysis_id.
Endpoint
- URL: /api/v2-0/analyses/{{analysis_id}}/sub-analyses/{{sub_analysis_id}}/code-reuse/families/{{family_id}}/find-related-files
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.analysis_id | string | Required | Parameters for the Get Sub Analysis Related Samples action |
path_parameters.family_id | string | Required | Parameters for the Get Sub Analysis Related Samples action |
path_parameters.sub_analysis_id | string | Required | Parameters for the Get Sub Analysis Related Samples action |
Input Example
{"path_parameters":{"analysis_id":"","family_id":"","sub_analysis_id":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result.files | array | Result of the operation |
result.files.reused_gene_count | number | Result of the operation |
result.files.sha256 | string | Result of the operation |
result.files.size_in_bytes | number | Result of the operation |
result_url | string | URL endpoint for the request |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"files":[]},"result_url":"/analyses/513555bd-1113-4079-80ff-c968e40bea16/sub-analyses/479d81e8-b6ba-4c13-8...","status":"succeeded"}}
Index Uploaded File
Upload a file to Intezer Analyze and index it into your private Genome Database. Supported classifications include malicious and trusted.
Endpoint
- URL: /api/v2-0/files/index
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
attachments | object | Required | File that you want to submit or upload. |
Input Example
{"attachments":{}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result_url | string | URL endpoint for the request |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{},"result_url":"/files/index/7c9b8902-7176-41f8-bcaf-b0fd4c395f78","status":"succeeded"}}
label file
Set a private label for a file in Intezer Analyze using the SHA256 path parameter and label in the JSON body.
Endpoint
- URL: /api/v2-0/files/{{sha256}}/label
- Method: PUT
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.sha256 | string | Required | Parameters for the label file action |
label | string | Optional | Parameter for label file |
Input Example
{"json_body":{"label":""},"path_parameters":{"sha256":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result_url | string | URL endpoint for the request |
Output Example
{"status_code":201,"reason":"Created","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result_url":"/tasks/5ffa5925-b651-4cca-9e15-92ee84ea4ad3"}}
Post Index Hash
Index a file into your private Genome Database in Intezer Analyze using the SHA256 hash and specify how to index it.
Endpoint
- URL: /api/v2-0/files/{{sha256}}/index
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.sha256 | string | Required | Parameters for the Post Index Hash action |
index_as | string | Optional | Parameter for Post Index Hash |
family_name | string | Optional | Name of the resource |
Input Example
{"json_body":{"index_as":"trusted","family_name":"Good Fam"},"path_parameters":{"sha256":""}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result_url | string | URL endpoint for the request |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{},"result_url":"/files/index/7c9b8902-7176-41f8-bcaf-b0fd4c395f78","status":"succeeded"}}
Search Incidents
Search for incidents in Intezer Analyze using provided incident IDs and retrieve their triage and response details.
Endpoint
- URL: /api/v2-0/incidents/search
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
incident_ids | array | Optional | List of incident IDs to search for in Intezer Analyze. |
Input Example
{"json_body":{"incident_ids":["incident-1234"]}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
result | object | Result of the operation |
result.incident_count | number | Unique identifier |
result.incidents | array | Unique identifier |
result.incidents.incident_id | string | Unique identifier |
result.incidents.intezer_incident_url | string | URL endpoint for the request |
result.incidents.alert_count | number | Unique identifier |
result.incidents.alert_ids | array | Unique identifier |
result.incidents.creation_time | string | Unique identifier |
result.incidents.creation_time_display | string | Unique identifier |
result.incidents.status | string | Unique identifier |
result.incidents.triage_result | object | Unique identifier |
result.incidents.triage_result.risk_level | string | Unique identifier |
result.incidents.triage_result.risk_level_display | string | Unique identifier |
result.incidents.triage_result.risk_category | string | Unique identifier |
result.incidents.triage_result.risk_category_display | string | Unique identifier |
result.incidents.triage_result.risk_score | number | Unique identifier |
result.incidents.source | string | Unique identifier |
result.incidents.source_display | string | Unique identifier |
result.incidents.source_type | string | Unique identifier |
status | string | Status value |
Output Example
{"status_code":200,"reason":"OK","response_headers":{"content-length":"140","content-type":"application/json","Date":"Wed, 13 Dec 2023 20:37:23 GMT"},"json_body":{"result":{"incident_count":1,"incidents":[]},"status":"succeeded"}}
Response Headers
Header | Description | Example |
|---|---|---|
content-length | The length of the response body in bytes | 140 |
content-type | The media type of the resource | application/json |
Date | The date and time at which the message was originated | Wed, 13 Dec 2023 20:37:23 GMT |