Cloudforce One

cloudforce_one

cloudforce_one.requests

Methods

Get Request Priority Status And TLP Constants -> Envelope<>
get/accounts/{account_identifier}/cloudforce-one/requests/constants

Get Request Priority, Status, and TLP constants

Create A New Request -> Envelope<>
post/accounts/{account_identifier}/cloudforce-one/requests/new

Creating a request adds the request into the Cloudforce One queue for analysis. In addition to the content, a short title, type, priority, and releasability should be provided. If one is not provided, a default will be assigned.

Delete A Request -> { errors, messages, success }
delete/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}

Delete a Request

Get A Request -> Envelope<>
get/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}

Get a Request

List Requests -> SinglePage<>
post/accounts/{account_identifier}/cloudforce-one/requests

List Requests

Get Request Quota -> Envelope<>
get/accounts/{account_identifier}/cloudforce-one/requests/quota

Get Request Quota

Get Request Types -> SinglePage<string>
get/accounts/{account_identifier}/cloudforce-one/requests/types

Get Request Types

Update A Request -> Envelope<>
put/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}

Updating a request alters the request in the Cloudforce One queue. This API may be used to update any attributes of the request after the initial submission. Only fields that you choose to update need to be add to the request body.

Domain types

Item = { id, content, created, 10 more... }
ListItem = { id, created, priority, 9 more... }
Quota = { anniversary_date, quarter_anniversary_date, quota, 1 more... }
RequestConstants = { priority, status, tlp }
RequestTypes = Array<string>

cloudforce_one.requests.assets

Methods

List Request Assets -> SinglePage<{ id, name, created, 2 more... }>
post/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/asset

List Request Assets

Delete A Request Asset -> { errors, messages, success }
delete/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/asset/{asset_identifer}

Delete a Request Asset

Get A Request Asset -> SinglePage<{ id, name, created, 2 more... }>
get/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/asset/{asset_identifer}

Get a Request Asset

Update A Request Asset -> Envelope<{ id, name, created, 2 more... }>
put/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/asset/{asset_identifer}

Update a Request Asset

cloudforce_one.requests.message

Methods

Create A New Request Message -> Envelope<>
post/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/message/new

Create a New Request Message

Delete A Request Message -> { errors, messages, success }
delete/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/message/{message_identifer}

Delete a Request Message

List Request Messages -> SinglePage<>
post/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/message

List Request Messages

Update A Request Message -> Envelope<>
put/accounts/{account_identifier}/cloudforce-one/requests/{request_identifier}/message/{message_identifer}

Update a Request Message

Domain types

Message = { id, author, content, 3 more... }

cloudforce_one.requests.priority

Methods

Create A New Priority Intelligence Requirement -> Envelope<>
post/accounts/{account_identifier}/cloudforce-one/requests/priority/new

Create a New Priority Intelligence Requirement

Delete A Priority Intelligence Requirement -> { errors, messages, success }
delete/accounts/{account_identifier}/cloudforce-one/requests/priority/{priority_identifer}

Delete a Priority Intelligence Requirement

Get A Priority Intelligence Requirement -> Envelope<>
get/accounts/{account_identifier}/cloudforce-one/requests/priority/{priority_identifer}

Get a Priority Intelligence Requirement

Get Priority Intelligence Requirement Quota -> Envelope<>
get/accounts/{account_identifier}/cloudforce-one/requests/priority/quota

Get Priority Intelligence Requirement Quota

Update A Priority Intelligence Requirement -> Envelope<>
put/accounts/{account_identifier}/cloudforce-one/requests/priority/{priority_identifer}

Update a Priority Intelligence Requirement

Domain types

Label = string
Priority = { id, created, labels, 4 more... }
PriorityEdit = { labels, priority, requirement, 1 more... }

cloudforce_one.scans

cloudforce_one.scans.config

Methods

Create A New Scan Config -> Envelope<{ id, account_id, frequency, 2 more... }>
post/accounts/{account_id}/cloudforce-one/scans/config

Create a new Scan Config

Delete A Scan Config -> Envelope<unknown>
delete/accounts/{account_id}/cloudforce-one/scans/config/{config_id}

Delete a Scan Config

Update An Existing Scan Config -> Envelope<{ id, account_id, frequency, 2 more... }>
patch/accounts/{account_id}/cloudforce-one/scans/config/{config_id}

Update an existing Scan Config

List Scan Configs -> SinglePage<{ id, account_id, frequency, 2 more... }>
get/accounts/{account_id}/cloudforce-one/scans/config

List Scan Configs

cloudforce_one.scans.results

Methods

Get The Latest Scan Result -> Envelope<{ 1.1.1.1 }>
get/accounts/{account_id}/cloudforce-one/scans/results/{config_id}

Get the Latest Scan Result

Domain types

ScanResult = { number, proto, status }
Cloudforce One

Threat Events

cloudforce_one.threat_events

Methods

Creates Bulk Events -> Array<{ id, accountId, attacker, 24 more... }>
post/accounts/{account_id}/cloudforce-one/events/create/bulk

The datasetId parameter must be defined. To list existing datasets (and their IDs) in your account, use the List Datasets endpoint.

Creates A New Event -> { id, accountId, attacker, 24 more... }
post/accounts/{account_id}/cloudforce-one/events/create

Events must be created in a client-specific dataset, which means the datasetId parameter must be defined. To create a dataset, see the Create Dataset endpoint.

Deletes An Event -> { uuid }
delete/accounts/{account_id}/cloudforce-one/events/{event_id}

The datasetId parameter must be defined. To list existing datasets (and their IDs) in your account, use the List Datasets endpoint.

Updates An Event -> { id, accountId, attacker, 24 more... }
patch/accounts/{account_id}/cloudforce-one/events/{event_id}

Updates an event

Reads An Event -> { id, accountId, attacker, 24 more... }
get/accounts/{account_id}/cloudforce-one/events/{event_id}

Reads an event

cloudforce_one.threat_events.attackers

Methods

Lists Attackers -> { items, type }
get/accounts/{account_id}/cloudforce-one/events/attackers

Lists attackers

cloudforce_one.threat_events.categories

Methods

Creates A New Category -> { killChain, name, uuid, 2 more... }
post/accounts/{account_id}/cloudforce-one/events/categories/create

Creates a new category

Deletes A Category -> { uuid }
delete/accounts/{account_id}/cloudforce-one/events/categories/{category_id}

Deletes a category

Updates A Category -> { killChain, name, uuid, 2 more... }
patch/accounts/{account_id}/cloudforce-one/events/categories/{category_id}

Updates a category

Reads A Category -> { killChain, name, uuid, 2 more... }
get/accounts/{account_id}/cloudforce-one/events/categories/{category_id}

Reads a category

Lists Categories -> Array<{ killChain, name, uuid, 2 more... }>
get/accounts/{account_id}/cloudforce-one/events/categories

Lists categories

cloudforce_one.threat_events.countries

Methods

Retrieves Countries Information For All Countries -> Array<{ result, success }>
get/accounts/{account_id}/cloudforce-one/events/countries

Retrieves countries information for all countries

cloudforce_one.threat_events.crons

Methods

Reads The Last Cron Update Time -> { id, update }
patch/accounts/{account_id}/cloudforce-one/events/cron

Reads the last cron update time

Reads The Last Cron Update Time -> { update }
get/accounts/{account_id}/cloudforce-one/events/cron

Reads the last cron update time

cloudforce_one.threat_events.datasets

Methods

Creates A Dataset -> { isPublic, name, uuid }
post/accounts/{account_id}/cloudforce-one/events/dataset/create

Creates a dataset

Updates An Existing Dataset -> { isPublic, name, uuid }
patch/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}

Updates an existing dataset

Reads A Dataset -> { isPublic, name, uuid }
get/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}

Reads a dataset

Lists All Datasets In An Account -> Array<{ isPublic, name, uuid }>
get/accounts/{account_id}/cloudforce-one/events/dataset

Lists all datasets in an account

Reads Data For A Raw Event -> { id, accountId, created, 3 more... }
get/accounts/{account_id}/cloudforce-one/events/raw/{dataset_id}/{event_id}

Reads data for a raw event

cloudforce_one.threat_events.event_tags

Methods

Adds A Tag To An Event -> Envelope<{ success }>
post/accounts/{account_id}/cloudforce-one/events/event_tag/{event_id}/create

Adds a tag to an event

Removes A Tag From An Event -> Envelope<{ success }>
delete/accounts/{account_id}/cloudforce-one/events/event_tag/{event_id}

Removes a tag from an event

cloudforce_one.threat_events.indicator_types

Methods

Lists All Indicator Types -> { items, type }
get/accounts/{account_id}/cloudforce-one/events/indicatorTypes

Lists all indicator types

cloudforce_one.threat_events.insights

Methods

Adds An Insight To An Event -> Envelope<{ content, uuid }>
post/accounts/{account_id}/cloudforce-one/events/{event_id}/insight/create

Adds an insight to an event

Deletes An Event Insight -> Envelope<{ success }>
delete/accounts/{account_id}/cloudforce-one/events/{event_id}/insight/{insight_id}

Deletes an event insight

Updates An Event Insight -> Envelope<{ content, uuid }>
patch/accounts/{account_id}/cloudforce-one/events/{event_id}/insight/{insight_id}

Updates an event insight

Reads An Event Insight -> Envelope<{ content, uuid }>
get/accounts/{account_id}/cloudforce-one/events/{event_id}/insight/{insight_id}

Reads an event insight

cloudforce_one.threat_events.raw

Methods

Updates A Raw Event -> { id, data }
patch/accounts/{account_id}/cloudforce-one/events/{event_id}/raw/{raw_id}

Updates a raw event

Reads Data For A Raw Event -> { id, accountId, created, 3 more... }
get/accounts/{account_id}/cloudforce-one/events/{event_id}/raw/{raw_id}

Reads data for a raw event

cloudforce_one.threat_events.relate

Methods

Removes An Event Reference -> Envelope<{ success }>
delete/accounts/{account_id}/cloudforce-one/events/relate/{event_id}

Removes an event reference

cloudforce_one.threat_events.tags

Methods

Creates A New Tag -> { name, uuid }
post/accounts/{account_id}/cloudforce-one/events/tags/create

Creates a new tag

cloudforce_one.threat_events.target_industries

Methods

Lists All Target Industries -> { items, type }
get/accounts/{account_id}/cloudforce-one/events/targetIndustries

Lists all target industries