config/main.json

{
    "ResponseCodes": {
        "Enrichment": [
            {
                "Code": 207,
                "Status": "Partial success enrichment response",
                "Message": "Some invalid enrichment, see error codes for details",
                "keys": "status,errors"
            },
            {
                "Code": 400,
                "Status": "Bad request",
                "Message": "Invalid enrichment, see error codes for details",
                "keys": "status,errors"
            }
        ],
        "NQL": [
            {
                "Code": 401,
                "Status": "Unauthorized",
                "Message": "No valid authentication credentials",
                "keys": "message,code,source"
            },
            {
                "Code": 403,
                "Status": "Forbidden",
                "Message": "Not authorized to execute queries",
                "keys": "message,code,source"
            },
            {
                "Code": 404,
                "Status": "Not found",
                "Message": "No query associated with that ID"
            },
            {
                "Code": 406,
                "Status": "Not Acceptable",
                "Message": "The Accept header should be \"application/json\", \"text/csv\" or empty"
            },
            {
                "Code": 500,
                "Status": "Internal server error",
                "Message": "Internal server error",
                "keys": "message,code,source"
            },
            {
                "Code": 503,
                "Status": "Service unavailable",
                "Message": "Service unavailable"
            }
        ]
    },
    "APIs": {
        "BASE": "/api",
        "OAuth": {
            "Method": "POST",
            "Path": "/oauth2/default/v1/token"
        },
        "Campaign": {
            "Method": "POST",
            "Path": "/v1/euf/campaign/trigger"
        },
        "RA_Exec": {
            "Method": "POST",
            "Path": "/v1/act/execute"
        },
        "RA_List": {
            "Method": "GET",
            "Path": "/v1/act/remote-action",
            "Details": "/details?nql-id="
        },
        "Enrichment": {
            "Method": "POST",
            "Path": "/v1/enrichment/data/fields",
            "Headers": {
                "x-enrichment-trace-id": "([guid]::NewGuid()).Guid"
            }
        },
        "NQL": {
            "Method": "POST",
            "Path": "/v2/nql/execute"
        },
        "NQL_Export": {
            "Method": "POST",
            "Path": "/v1/nql/export"
        },
        "NQL_Export_Status": {
            "Method": "GET",
            "Path": "/v1/nql/status/"
        },
        "WF_Exec": {
            "Method": "POST",
            "Path": "/v2/workflows/execute"
        },
        "WF_List": {
            "Method": "GET",
            "Path": "/v1/workflows",
            "Details": "/details?nql-id="
        }
    },
    "EnrichmentIDMap": {
        "device.name": "device/device/name",
        "device.uid": "device/device/uid",
        "user.sid": "user/user/sid",
        "user.uid": "user/user/uid",
        "user.upn": "user/user/upn",
        "binary.uid": "binary/binary/uid",
        "package.uid": "package/package/uid"
    },
    "EnrichmentFieldMap": {
        "device.configuration_tag": "device/device/configuration_tag",
        "device.virtualization.desktop_broker": "device/device/virtualization/desktop_broker",
        "device.virtualization.desktop_pool": "device/device/virtualization/desktop_pool",
        "device.virtualization.disk_image": "device/device/virtualization/disk_image",
        "device.virtualization.environment_name": "device/device/virtualization/environment_name",
        "device.virtualization.hostname": "device/device/virtualization/hostname",
        "device.virtualization.hypervisor_name": "device/device/virtualization/hypervisor_name",
        "device.virtualization.instance_size": "device/device/virtualization/instance_size",
        "device.virtualization.last_update": "device/device/virtualization/last_update",
        "device.virtualization.region": "device/device/virtualization/region",
        "device.virtualization.type": "device/device/virtualization/type",
        "user.ad.city": "user/user/ad/city",
        "user.ad.country_code": "user/user/ad/country_code",
        "user.ad.department": "user/user/ad/department",
        "user.ad.distinguished_name": "user/user/ad/distinguished_name",
        "user.ad.email_address": "user/user/ad/email_address",
        "user.ad.full_name": "user/user/ad/full_name",
        "user.ad.job_title": "user/user/ad/job_title",
        "user.ad.last_update": "user/user/ad/last_update",
        "user.ad.office": "user/user/ad/office",
        "user.ad.organizational_unit": "user/user/ad/organizational_unit",
        "user.ad.username": "user/user/ad/username"
    }
}