config/main.json
|
{
"ResponseCodes": { "Enrich": [ { "Code": 207, "Status": "Partial success enrichment response", "Message": "Some invalid enrichment, see error codes for details", "keys": "status,errors" }, { "Code": 400, "Status": "Bad request", "Message": "Invalid enrichment, see error codes for details", "keys": "status,errors" } ], "NQL": [ { "Code": 404, "Status": "Query not found", "Message": "Given queryId doesn't exist" }, { "Code": 500, "Status": "Internal server error", "Message": "Internal server error", "keys": "message,code,source" }, { "Code": 503, "Status": "Internal error", "Message": "Internal error" } ] }, "APIs": { "BASE": "/api/v1", "DETAILS": "/details?nql-id=", "OAUTH": { "Method": "POST", "uri": "/token" }, "Campaign": { "Method": "POST", "uri": "/euf/campaign/trigger" }, "RA_Exec": { "Method": "POST", "uri": "/act/execute" }, "RA_List": { "Method": "GET", "uri": "/act/remote-action" }, "Enrich": { "Method": "POST", "uri": "/enrichment/data/fields", "Headers" : { "x-enrichment-trace-id": "([guid]::NewGuid()).Guid" } }, "NQL": { "Method": "POST", "uri": "/nql/execute" }, "WF_Exec": { "Method": "POST", "uri": "/workflows/execute" }, "WF_List": { "Method": "GET", "uri": "/workflows" } }, "EnrichmentIDMap": { "device.name": "device/device/name", "device.uid": "device/device/uid", "user.sid": "user/user/sid", "user.uid": "user/user/uid", "binary.uid": "binary/binary/uid", "package.uid": "package/package/uid" } } |