Skip to main content
技术领域
AI 和机器学习
应用开发
应用托管
计算
数据分析和流水线
数据库
分布式云、混合云和多云
行业解决方案
迁移
网络
可观测性和监控
安全
Storage
跨产品工具
访问权限和资源管理
费用和用量管理
基础设施即代码
SDK、语言、框架和工具
/
Console
English
中文 – 简体
Google Security Operations
免费开始使用吧
概览
指南
用例
参考文档
支持
资源
技术领域
More
概览
指南
用例
参考文档
支持
资源
跨产品工具
More
Console
Google SecOps API 参考文档
API 和库概览
Chronicle API 参考文档
Chronicle API 概览
向 Chronicle API 进行身份验证
Chronicle API 的权限
迁移 Chronicle API 版本
从旧版 SIEM API 迁移到 Chronicle API
概览
SIEM API 端点映射
v1
REST 资源
projects.locations.instances
概览
computeAllFindingsRefinementActivities
extractSyslog
findEntity
findEntityAlerts
findRelatedEntities
findUdmFieldValues
get
getBigQueryExport
getEnrichmentCombination
getRiskConfig
getThreatCollectionFilterSet
listAllFindingsRefinementDeployments
queryProductSourceStats
searchEntities
summarizeEntitiesFromQuery
summarizeEntity
testFindingsRefinement
udmSearch
updateBigQueryExport
updateRiskConfig
validateQuery
verifyReferenceList
verifyRuleText
projects.locations.instances.alertGroupingRules
概览
create
delete
get
list
patch
projects.locations.instances.announcements
概览
create
delete
get
list
patch
projects.locations.instances.bigQueryExport
概览
provision
projects.locations.instances.caseCloseDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.caseQueueFilters
概览
create
delete
get
getShareConfig
list
patch
updateShareConfig
projects.locations.instances.caseStageDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.caseTagDefinitions
概览
create
delete
get
import
list
patch
projects.locations.instances.cases
概览
addTag
createInsight
executeBulkAddTag
executeBulkAssign
executeBulkChangePriority
executeBulkChangeStage
executeBulkClose
executeBulkReopen
generateReport
get
getCaseOverviewData
list
合并
patch
pauseSla
removeTag
resolveOverviewWidget
resumeSla
projects.locations.instances.cases.caseAlerts
概览
createRecommendationLongRunning
fetchRecommendation
get
getAlertOverviewData
list
move
patch
pauseSla
resolveOverviewWidget
resumeSla
setSla
projects.locations.instances.cases.caseAlerts.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.cases.caseAlerts.involvedEntities
概览
addProperty
create
fetchCards
get
list
patch
updateProperty
projects.locations.instances.cases.caseComments
概览
create
delete
get
list
patch
projects.locations.instances.cases.caseWallRecords
概览
收藏
fetchActivitiesCount
get
list
projects.locations.instances.cases.chatMessages
概览
create
get
list
pinMessage
unpinMessage
unreadMessagesCount
upload
projects.locations.instances.cases.chatMessages.attachments
概览
download
projects.locations.instances.cases.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.contentHub.contentPacks
概览
添加
alignPlaybooks
delete
deployConnectorInstances
deployPlaybooks
deployTestCases
download
get
installIntegration
list
markAsDeployed
upload
projects.locations.instances.contentHub.featuredContentNativeDashboards
概览
get
安装
list
projects.locations.instances.contentHub.featuredContentRules
概览
list
projects.locations.instances.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.coverageDetails
概览
list
projects.locations.instances.customLists
概览
batchDelete
create
delete
export
get
import
list
patch
projects.locations.instances.dashboardCharts
概览
batchGet
get
projects.locations.instances.dashboardQueries
概览
execute
get
projects.locations.instances.dataAccessLabels
概览
create
delete
get
list
patch
projects.locations.instances.dataAccessScopes
概览
create
delete
get
list
patch
projects.locations.instances.dataExports
概览
cancel
create
fetchServiceAccountForDataExport
get
list
projects.locations.instances.dataTableOperationErrors
概览
get
projects.locations.instances.dataTables
概览
create
delete
get
list
patch
projects.locations.instances.dataTables.dataTableRows
概览
bulkCreate
bulkCreateAsync
bulkGet
bulkReplace
bulkReplaceAsync
bulkUpdate
bulkUpdateAsync
create
delete
get
list
patch
projects.locations.instances.dynamicParameters
概览
create
delete
export
get
import
list
patch
projects.locations.instances.emailTemplates
概览
batchDelete
create
delete
export
get
import
list
patch
projects.locations.instances.enrichmentControls
概览
create
停用
get
list
projects.locations.instances.entities
概览
get
import
projects.locations.instances.entitiesBlocklists
概览
create
delete
get
list
patch
projects.locations.instances.environmentGroups
概览
create
delete
get
list
patch
projects.locations.instances.environments
概览
create
delete
get
list
patch
resetWeights
projects.locations.instances.events
概览
batchGet
fetchEnrichedEvent
get
import
projects.locations.instances.feedPacks
概览
get
list
projects.locations.instances.feedServiceAccounts
概览
fetchServiceAccountForCustomer
projects.locations.instances.feedSourceTypeSchemas
概览
list
projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
概览
list
projects.locations.instances.feeds
概览
delete
停用
启用
generateSecret
get
importPushLogs
list
projects.locations.instances.findingsRefinements
概览
computeFindingsRefinementActivity
create
get
getDeployment
list
patch
updateDeployment
projects.locations.instances.formDynamicParameters
概览
get
list
saveForm
projects.locations.instances.forwarders
概览
importStatsEvents
projects.locations.instances.ingestionLogLabels
概览
list
projects.locations.instances.ingestionLogNamespaces
概览
list
projects.locations.instances.integrations
概览
create
delete
download
downloadDependency
exportIntegrationItems
fetchAffectedItems
fetchAgentIntegrations
fetchCommercialDiff
fetchDependencies
fetchRestrictedAgents
get
getFetchProductionDiff
getFetchStagingDiff
import
importIntegrationDependency
importIntegrationItems
list
pushToProduction
pushToStaging
updateCustomIntegration
upload
projects.locations.instances.integrations.actions
概览
create
delete
executeTest
fetchActionsByEnvironment
fetchTemplate
get
list
patch
projects.locations.instances.integrations.actions.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.connectors
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.connectors.connectorInstances
概览
create
delete
fetchLatestDefinition
get
list
patch
runOnDemand
setLogsCollection
projects.locations.instances.integrations.connectors.connectorInstances.logs
概览
get
list
projects.locations.instances.integrations.connectors.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.integrations.connectors.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.integrationInstances
概览
create
delete
executeTest
fetchAffectedItems
fetchDefaultInstance
get
list
patch
projects.locations.instances.integrations.jobs
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.jobs.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.integrations.jobs.jobInstances
概览
create
delete
get
list
patch
runOnDemand
projects.locations.instances.integrations.jobs.jobInstances.logs
概览
get
list
projects.locations.instances.integrations.jobs.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.managers
概览
create
delete
fetchTemplate
get
list
patch
projects.locations.instances.integrations.managers.revisions
概览
create
delete
get
list
回滚
projects.locations.instances.iocAssociations
概览
batchGet
fetchRelated
get
projects.locations.instances.iocs
概览
batchGet
fetchRelated
find
get
projects.locations.instances.legacySoarUsers
概览
getLocalization
getNotificationSettings
updateLocalization
updateNotificationSettings
projects.locations.instances.legacySoarUsers.attachments
概览
delete
download
get
list
upload
projects.locations.instances.legacySoarUsers.userNotifications
概览
计数
get
list
markAsRead
projects.locations.instances.legacySoarUsers.workdeskContacts
概览
create
delete
get
list
patch
projects.locations.instances.legacySoarUsers.workdeskLinks
概览
create
delete
get
list
patch
projects.locations.instances.legacySoarUsers.workdeskNotes
概览
create
delete
get
list
patch
projects.locations.instances.logTypes
概览
create
generateEventTypesSuggestions
getLogTypeSetting
legacySubmitParserExtension
list
runParser
updateLogTypeSetting
projects.locations.instances.logTypes.logTypeSettings
概览
list
projects.locations.instances.logTypes.logs
概览
import
list
projects.locations.instances.logTypes.parserExtensions
概览
activate
create
delete
get
list
projects.locations.instances.logTypes.parserExtensions.extensionValidationReports
概览
get
list
projects.locations.instances.logTypes.parserExtensions.extensionValidationReports.validationErrors
概览
list
projects.locations.instances.logTypes.parserExtensions.validationReports
概览
get
projects.locations.instances.logTypes.parserExtensions.validationReports.parsingErrors
概览
list
projects.locations.instances.logTypes.parsers
概览
activate
activateReleaseCandidateParser
复制
create
deactivate
delete
fetchParserCandidates
get
list
patch
projects.locations.instances.logTypes.parsers.validationReports
概览
get
projects.locations.instances.logTypes.parsers.validationReports.parsingErrors
概览
list
projects.locations.instances.marketplaceIntegrations
概览
fetchCommercialDiff
get
安装
list
uninstall
projects.locations.instances.moduleSettings
概览
get
list
rebrandingSettings
projects.locations.instances.moduleSettings.properties
概览
batchUpdate
get
list
patch
testSettings
projects.locations.instances.nativeDashboards
概览
addChart
create
delete
duplicate
duplicateChart
editChart
export
get
import
list
patch
removeChart
projects.locations.instances.ontologyRecords.visualFamilies
概览
create
delete
export
get
import
list
patch
projects.locations.instances.operations
概览
cancel
delete
get
list
projects.locations.instances.propertySchemaDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.referenceLists
概览
create
get
list
patch
projects.locations.instances.remoteAgents
概览
connectorValidRemoteAgents
create
delete
fetchEditableRemoteAgents
fetchInstallationCommand
fetchInstallerFile
fetchRedeployStatus
fetchRemoteAgentsCompatibleWithJobs
fetchRemoteAgentsInformation
get
list
migrateConnectors
patch
redeployRemoteAgent
sendRemoteAgentInstaller
upgradeRemoteAgent
projects.locations.instances.requestTemplates
概览
create
delete
get
list
patch
projects.locations.instances.ruleExecutionErrors
概览
list
projects.locations.instances.rules
概览
create
delete
get
getDeployment
list
listRevisions
patch
updateDeployment
projects.locations.instances.rules.deployments
概览
list
projects.locations.instances.rules.retrohunts
概览
create
get
list
projects.locations.instances.savedColumnSets
概览
create
delete
get
list
patch
projects.locations.instances.slaDefinitions
概览
create
delete
export
get
import
list
patch
projects.locations.instances.soarDomains
概览
create
delete
export
get
import
list
patch
projects.locations.instances.soarNetworks
概览
create
delete
deleteAll
export
get
import
list
patch
projects.locations.instances.socRoles
概览
create
delete
get
list
patch
projects.locations.instances.systemNotifications
概览
计数
get
list
markAsRead
projects.locations.instances.tasks
概览
create
delete
get
list
patch
projects.locations.instances.threatCollections
概览
fetchEntityMetadata
fetchIocMatchMetadata
fetchRelated
get
list
projects.locations.instances.uniqueEntities
概览
addNote
download
fetchFull
get
list
patch
projects.locations.instances.users.savedColumnSets
概览
create
delete
get
list
patch
projects.locations.instances.users.searchQueries
概览
create
delete
get
list
patch
projects.locations.instances.views
概览
fetchPredefined
get
list
saveOverviewTemplate
projects.locations.instances.watchlists
概览
create
delete
get
list
patch
类型
AlertCard
AlertCardSla
AlertCountByRule
AlertOverviewWidget
BigQueryExport
CaseApsGrapthWidget
CaseAssistantWidget
CaseDescriptionWidget
CaseImpactedResourcesWidget
CaseInsightSeverity
CaseInsightType
CaseRecommendationsWidget
CaseRelatedFindingsWidget
ContentPackItemInstallationResponse
ContentSourceType
DataSource
DetectionExclusionApplication
EntitiesHighlightWidget
EntryMetadata
EventHighlightsWidget
EventsWidget
FeedSourceType
FieldAndValue
FieldExtractors
FilterOperatorAndValues
FindingsRefinementActivity
FindingsRefinementDeployment
FormWidget
GraphWidget
HtmlWidget
输入源
InsightsWidget
InstallationType
IntegrationDiff
JsonResultsWidget
KeyValueWidget
LanguageFeature
ListContextPropertiesResponse
ListParsingErrorsResponse
ListSavedColumnSetsResponse
日志
LogTypeSetting
NativeDashboardView
NotificationSettings
OverviewData
PotentiallyGroupedAlertsWidget
QuickActionButton
QuickActionInstanceConfiguration
QuickActionParameterValue
QuickActionsWidget
ReferenceListView
RiskConfig
RuleDeployment
RuleOverviewWidget
RuleView
ScriptResultEntityData
SecurityEntity
ShareConfig
SiemAlertsWidget
SLA
StatisticsWidget
TargetScopeEnum
TextWidget
ThirdPartyWidget
时间轴
TimelineWidget
UserLocalization
WallActivitiesWidget
WidgetContextGroup
WidgetFieldGroupData
WidgetResultStatus
WidgetTemplateGridColumns
WidgetTemplateType
WorkflowPendingStepsWidget
v1beta
REST 资源
instances.feeds
概览
importPushLogs
projects.locations.instances
概览
computeAllFindingsRefinementActivities
extractSyslog
findEntity
findEntityAlerts
findRelatedEntities
findUdmFieldValues
generateCollectionAgentAuth
generateUdmKeyValueMappings
get
getBigQueryExport
getEnrichmentCombination
getRiskConfig
getThreatCollectionFilterSet
listAllFindingsRefinementDeployments
queryProductSourceStats
searchEntities
submitResponseFeedback
summarizeEntitiesFromQuery
summarizeEntity
testFindingsRefinement
udmSearch
updateBigQueryExport
updateRiskConfig
validateQuery
verifyReferenceList
verifyRuleText
projects.locations.instances.alertGroupingRules
概览
create
delete
get
list
patch
projects.locations.instances.announcements
概览
create
delete
get
list
patch
projects.locations.instances.bigQueryExport
概览
provision
projects.locations.instances.caseCloseDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.caseQueueFilters
概览
create
delete
get
getShareConfig
list
patch
updateShareConfig
projects.locations.instances.caseStageDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.caseTagDefinitions
概览
create
delete
get
import
list
patch
projects.locations.instances.cases
概览
addTag
createInsight
executeBulkAddTag
executeBulkAssign
executeBulkChangePriority
executeBulkChangeStage
executeBulkClose
executeBulkReopen
generateReport
get
getCaseOverviewData
list
合并
patch
pauseSla
removeTag
resolveOverviewWidget
resumeSla
projects.locations.instances.cases.alerts.customFieldValues
概览
batchUpdate
get
list
patch
projects.locations.instances.cases.caseAlerts
概览
createRecommendationLongRunning
fetchRecommendation
get
getAlertOverviewData
list
listAlertViews
move
patch
pauseSla
resolveOverviewWidget
resumeSla
setSla
projects.locations.instances.cases.caseAlerts.connectorEvents
概览
get
getFormatted
list
projects.locations.instances.cases.caseAlerts.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.cases.caseAlerts.customFieldValues
概览
batchUpdate
get
list
patch
projects.locations.instances.cases.caseAlerts.involvedEntities
概览
addProperty
create
fetchCards
get
list
patch
updateProperty
projects.locations.instances.cases.caseComments
概览
create
delete
get
list
patch
projects.locations.instances.cases.caseWallRecords
概览
收藏
fetchActivitiesCount
get
list
projects.locations.instances.cases.chatMessages
概览
create
get
list
pinMessage
unpinMessage
unreadMessagesCount
upload
projects.locations.instances.cases.chatMessages.attachments
概览
download
projects.locations.instances.cases.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.cases.customFieldValues
概览
batchUpdate
get
list
patch
projects.locations.instances.contentHub.contentPacks
概览
添加
alignPlaybooks
delete
deployConnectorInstances
deployPlaybooks
deployTestCases
download
get
installIntegration
list
markAsDeployed
upload
projects.locations.instances.contentHub.featuredContentNativeDashboards
概览
get
安装
list
projects.locations.instances.contentHub.featuredContentRules
概览
list
projects.locations.instances.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.coverageDetails
概览
list
projects.locations.instances.customLists
概览
batchDelete
create
delete
export
get
import
list
patch
projects.locations.instances.dashboardCharts
概览
batchGet
get
projects.locations.instances.dashboardQueries
概览
execute
get
projects.locations.instances.dataAccessLabels
概览
create
delete
get
list
patch
projects.locations.instances.dataAccessScopes
概览
create
delete
get
list
patch
projects.locations.instances.dataExports
概览
cancel
create
fetchServiceAccountForDataExport
get
list
projects.locations.instances.dataTableOperationErrors
概览
get
projects.locations.instances.dataTables
概览
create
delete
get
list
patch
projects.locations.instances.dataTables.dataTableRows
概览
bulkCreate
bulkCreateAsync
bulkGet
bulkReplace
bulkReplaceAsync
bulkUpdate
bulkUpdateAsync
create
delete
get
list
patch
projects.locations.instances.dynamicParameters
概览
create
delete
export
get
import
list
patch
projects.locations.instances.emailTemplates
概览
batchDelete
create
delete
export
get
import
list
patch
projects.locations.instances.enrichmentControls
概览
create
停用
get
list
projects.locations.instances.entities
概览
get
import
projects.locations.instances.entitiesBlocklists
概览
create
delete
get
list
patch
projects.locations.instances.environmentGroups
概览
create
delete
get
list
patch
projects.locations.instances.environments
概览
create
delete
get
list
patch
resetWeights
projects.locations.instances.events
概览
batchGet
fetchEnrichedEvent
get
import
projects.locations.instances.feedPacks
概览
get
list
projects.locations.instances.feedServiceAccounts
概览
fetchServiceAccountForCustomer
projects.locations.instances.feedSourceTypeSchemas
概览
list
projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
概览
list
projects.locations.instances.feeds
概览
create
delete
停用
启用
generateSecret
get
importPushLogs
list
patch
projects.locations.instances.findingsRefinements
概览
computeFindingsRefinementActivity
create
get
getDeployment
list
patch
updateDeployment
projects.locations.instances.formDynamicParameters
概览
get
list
saveForm
projects.locations.instances.forwarders
概览
create
delete
generateForwarderFiles
get
importStatsEvents
list
patch
projects.locations.instances.forwarders.collectors
概览
create
delete
get
list
patch
projects.locations.instances.ingestionLogLabels
概览
list
projects.locations.instances.ingestionLogNamespaces
概览
list
projects.locations.instances.integrations
概览
create
delete
download
downloadDependency
exportIntegrationItems
fetchAffectedItems
fetchAgentIntegrations
fetchCommercialDiff
fetchDependencies
fetchRestrictedAgents
get
getFetchProductionDiff
getFetchStagingDiff
import
importIntegrationDependency
importIntegrationItems
list
patch
pushToProduction
pushToStaging
updateCustomIntegration
upload
projects.locations.instances.integrations.actions
概览
create
delete
executeTest
fetchActionsByEnvironment
fetchTemplate
get
list
patch
projects.locations.instances.integrations.actions.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.connectors
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.connectors.connectorInstances
概览
create
delete
fetchLatestDefinition
get
list
patch
runOnDemand
setLogsCollection
projects.locations.instances.integrations.connectors.connectorInstances.logs
概览
get
list
projects.locations.instances.integrations.connectors.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.integrations.connectors.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.integrationInstances
概览
create
delete
executeTest
fetchAffectedItems
fetchDefaultInstance
get
list
patch
projects.locations.instances.integrations.jobs
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.jobs.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.integrations.jobs.jobInstances
概览
create
delete
get
list
patch
runOnDemand
projects.locations.instances.integrations.jobs.jobInstances.logs
概览
get
list
projects.locations.instances.integrations.jobs.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.managers
概览
create
delete
fetchTemplate
get
list
patch
projects.locations.instances.integrations.managers.revisions
概览
create
delete
get
list
回滚
projects.locations.instances.iocAssociations
概览
batchGet
fetchRelated
get
projects.locations.instances.iocs
概览
batchGet
fetchRelated
find
get
projects.locations.instances.labsExperiments
概览
execute
get
list
patch
projects.locations.instances.labsExperiments.executions
概览
get
list
patch
projects.locations.instances.legacySoarUsers
概览
getLocalization
getNotificationSettings
updateLocalization
updateNotificationSettings
projects.locations.instances.legacySoarUsers.attachments
概览
delete
download
get
list
upload
projects.locations.instances.legacySoarUsers.userNotifications
概览
计数
get
list
markAsRead
projects.locations.instances.legacySoarUsers.workdeskContacts
概览
create
delete
get
list
patch
projects.locations.instances.legacySoarUsers.workdeskLinks
概览
create
delete
get
list
patch
projects.locations.instances.legacySoarUsers.workdeskNotes
概览
create
delete
get
list
patch
projects.locations.instances.logTypes
概览
create
generateEventTypesSuggestions
getLogTypeSetting
legacySubmitParserExtension
list
runParser
search
updateLogTypeSetting
projects.locations.instances.logTypes.logTypeSettings
概览
list
projects.locations.instances.logTypes.logs
概览
import
list
projects.locations.instances.logTypes.parserExtensions
概览
activate
create
delete
get
list
projects.locations.instances.logTypes.parserExtensions.extensionValidationReports
概览
get
list
projects.locations.instances.logTypes.parserExtensions.extensionValidationReports.validationErrors
概览
list
projects.locations.instances.logTypes.parserExtensions.validationReports
概览
get
projects.locations.instances.logTypes.parserExtensions.validationReports.parsingErrors
概览
list
projects.locations.instances.logTypes.parsers
概览
activate
activateReleaseCandidateParser
复制
create
deactivate
delete
fetchParserCandidates
get
list
patch
projects.locations.instances.logTypes.parsers.validationReports
概览
get
projects.locations.instances.logTypes.parsers.validationReports.parsingErrors
概览
list
projects.locations.instances.marketplaceIntegrations
概览
fetchCommercialDiff
get
安装
list
uninstall
projects.locations.instances.moduleSettings
概览
get
list
rebrandingSettings
projects.locations.instances.moduleSettings.properties
概览
batchUpdate
get
list
patch
testSettings
projects.locations.instances.nativeDashboards
概览
addChart
create
delete
duplicate
duplicateChart
editChart
export
get
import
list
patch
removeChart
projects.locations.instances.ontologyRecords.visualFamilies
概览
create
delete
export
get
import
list
patch
projects.locations.instances.operations
概览
cancel
delete
get
list
projects.locations.instances.propertySchemaDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.referenceLists
概览
create
get
list
patch
projects.locations.instances.remoteAgents
概览
connectorValidRemoteAgents
create
delete
fetchEditableRemoteAgents
fetchInstallationCommand
fetchInstallerFile
fetchRedeployStatus
fetchRemoteAgentsCompatibleWithJobs
fetchRemoteAgentsInformation
get
list
migrateConnectors
patch
redeployRemoteAgent
sendRemoteAgentInstaller
upgradeRemoteAgent
projects.locations.instances.requestTemplates
概览
create
delete
get
list
patch
projects.locations.instances.ruleExecutionErrors
概览
list
projects.locations.instances.rules
概览
create
delete
get
getDeployment
list
listRevisions
patch
updateDeployment
projects.locations.instances.rules.deployments
概览
list
projects.locations.instances.rules.retrohunts
概览
create
get
list
projects.locations.instances.savedColumnSets
概览
create
delete
get
list
patch
projects.locations.instances.slaDefinitions
概览
create
delete
export
get
import
list
patch
projects.locations.instances.soarDomains
概览
create
delete
export
get
import
list
patch
projects.locations.instances.soarNetworks
概览
create
delete
deleteAll
export
get
import
list
patch
projects.locations.instances.socRoles
概览
create
delete
get
list
patch
projects.locations.instances.systemNotifications
概览
计数
get
list
markAsRead
projects.locations.instances.tasks
概览
create
delete
get
list
patch
projects.locations.instances.threatCollections
概览
fetchEntityMetadata
fetchIocMatchMetadata
fetchRelated
get
list
projects.locations.instances.uniqueEntities
概览
addNote
download
fetchFull
get
list
patch
projects.locations.instances.users.savedColumnSets
概览
create
delete
get
list
patch
projects.locations.instances.users.searchQueries
概览
create
delete
get
list
patch
projects.locations.instances.views
概览
fetchPredefined
get
list
saveOverviewTemplate
projects.locations.instances.watchlists
概览
create
delete
get
list
patch
projects.locations.instances.webhooks
概览
WebhookIngestion
create
delete
exportLogs
get
getLogs
getStatistics
list
patch
revokeUrl
类型
AlertCard
AlertCardSla
AlertCountByRule
AlertOverviewWidget
BatchUpdateCustomFieldValuesResponse
BigQueryExport
CaseApsGrapthWidget
CaseAssistantWidget
CaseDescriptionWidget
CaseImpactedResourcesWidget
CaseInsightSeverity
CaseInsightType
CaseRecommendationsWidget
CaseRelatedFindingsWidget
ContentPackItemInstallationResponse
ContentSourceType
DataSource
DetectionExclusionApplication
EntitiesHighlightWidget
EntryMetadata
EventHighlightsWidget
EventsWidget
FeedSourceType
FieldAndValue
FieldExtractors
FilterOperatorAndValues
FindingsRefinementActivity
FindingsRefinementDeployment
FormWidget
ForwarderMetadata
GraphWidget
HtmlWidget
输入源
InsightsWidget
InstallationType
IntegrationDiff
JsonResultsWidget
KeyValueWidget
LanguageFeature
ListContextPropertiesResponse
ListCustomFieldValuesResponse
ListParsingErrorsResponse
ListSavedColumnSetsResponse
日志
LogTypeSetting
NativeDashboardView
NotificationSettings
OverviewData
PotentiallyGroupedAlertsWidget
QuickActionButton
QuickActionInstanceConfiguration
QuickActionParameterValue
QuickActionsWidget
ReferenceListView
RegexFilter
RiskConfig
RuleDeployment
RuleOverviewWidget
RuleView
ScriptResultEntityData
SecurityEntity
ShareConfig
SiemAlertsWidget
SLA
StatisticsWidget
TargetScopeEnum
TextWidget
ThirdPartyWidget
时间轴
TimelineWidget
UpdateCustomFieldValuesRequest
UserLocalization
WallActivitiesWidget
WidgetContextGroup
WidgetFieldGroupData
WidgetResultStatus
WidgetTemplateGridColumns
WidgetTemplateType
WorkflowPendingStepsWidget
v1alpha
REST 资源
instances.feeds
概览
importPushLogs
projects.locations.instances
概览
batchValidateWatchlistEntities
computeAllFindingsRefinementActivities
continuePocGraduation
countAllCuratedRuleSetDetections
createFeedback
delete
evaluateRuleCoverage
extractSyslog
fetchFederationAccess
findEntity
findEntityAlerts
findRelatedEntities
findUdmFieldValues
generateCollectionAgentAuth
generateRules
generateSoarAuthJwt
generateSoarChatMessage
generateSyntheticEvents
generateThreatDetectionOpportunity
generateUdmKeyValueMappings
generateWorkspaceConnectionToken
get
getAgentSettings
getBigQueryExport
getEnrichmentCombination
getManagedDomainSettings
getMultitenantDirectory
getRiskConfig
getThreatCollectionFilterSet
graduatePocInstance
legacyCaseFederationPlatforms
legacySystemMetadata
listAllFindingsRefinementDeployments
patch
queryProductSourceStats
runThreatHunt
search
searchEntities
searchRawLogs
submitResponseFeedback
suggestSql
summarizeEntitiesFromQuery
summarizeEntity
testFindingsRefinement
translateUdmQuery
translateYlRule
udmSearch
undelete
updateAgentSettings
updateBigQueryExport
updateRiskConfig
validateQuery
verifyNonce
verifyReferenceList
verifyRuleText
projects.locations.instances.alertGroupingRules
概览
create
delete
get
list
patch
projects.locations.instances.analytics
概览
list
projects.locations.instances.analytics.entities.analyticValues
概览
list
projects.locations.instances.announcements
概览
create
delete
get
list
patch
projects.locations.instances.bigQueryAccess
概览
provide
projects.locations.instances.bigQueryExport
概览
provision
projects.locations.instances.calculatedFieldDefinitions
概览
create
delete
fetchAvailableTargetFields
fetchDynamicOptions
get
list
patch
validateDependency
projects.locations.instances.caseCloseDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.caseQueueFilters
概览
create
delete
get
getShareConfig
list
patch
updateShareConfig
projects.locations.instances.caseStageDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.caseTagDefinitions
概览
create
delete
get
import
list
patch
projects.locations.instances.cases
概览
addTag
countPriorities
createInsight
executeBulkAddTag
executeBulkAssign
executeBulkChangePriority
executeBulkChangeStage
executeBulkClose
executeBulkReopen
generateReport
get
getCaseOverviewData
getOrCreateCaseSummary
list
合并
patch
pauseSla
removeTag
resolveOverviewWidget
resumeSla
projects.locations.instances.cases.alerts.customFieldValues
概览
batchUpdate
get
list
patch
projects.locations.instances.cases.caseAlerts
概览
addTag
createRecommendationLongRunning
fetchRecommendation
get
getAlertOverviewData
list
listAlertViews
move
patch
pauseSla
removeTag
resolveOverviewWidget
resumeSla
setSla
projects.locations.instances.cases.caseAlerts.connectorEvents
概览
get
getFormatted
list
projects.locations.instances.cases.caseAlerts.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.cases.caseAlerts.customFieldValues
概览
batchUpdate
get
list
patch
projects.locations.instances.cases.caseAlerts.involvedEntities
概览
addProperty
create
fetchCards
get
list
patch
updateProperty
projects.locations.instances.cases.caseComments
概览
create
delete
get
list
patch
projects.locations.instances.cases.caseEvidenceDatas
概览
get
list
projects.locations.instances.cases.caseWallRecords
概览
收藏
fetchActivitiesCount
get
list
projects.locations.instances.cases.chatMessages
概览
create
get
list
pinMessage
unpinMessage
unreadMessagesCount
upload
projects.locations.instances.cases.chatMessages.attachments
概览
download
projects.locations.instances.cases.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.cases.customFieldValues
概览
batchUpdate
get
list
patch
projects.locations.instances.contentHub.contentPacks
概览
添加
alignPlaybooks
delete
deployConnectorInstances
deployPlaybooks
deployTestCases
download
get
installIntegration
list
markAsDeployed
upload
projects.locations.instances.contentHub.featuredContentNativeDashboards
概览
get
安装
list
projects.locations.instances.contentHub.featuredContentPlaybooks
概览
fetchFacets
get
安装
list
projects.locations.instances.contentHub.featuredContentRules
概览
list
projects.locations.instances.contentHub.featuredContentSearchQueries
概览
get
installFeaturedContentSearchQuery
list
projects.locations.instances.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.coverageDetails
概览
get
list
projects.locations.instances.curatedRuleSetCategories
概览
get
list
projects.locations.instances.curatedRuleSetCategories.curatedRuleSets
概览
countCuratedRuleSetDetections
get
list
projects.locations.instances.curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments
概览
batchUpdate
get
list
patch
projects.locations.instances.curatedRules
概览
get
list
projects.locations.instances.customFields
概览
create
delete
get
list
patch
projects.locations.instances.customLists
概览
batchDelete
create
delete
export
get
import
list
patch
projects.locations.instances.dashboardCharts
概览
batchGet
get
projects.locations.instances.dashboardQueries
概览
execute
get
projects.locations.instances.dashboardScheduledReports
概览
create
delete
duplicate
fetchHistory
get
list
patch
触发器
projects.locations.instances.dashboards
概览
batchMigrate
复制
create
delete
fetchMigratable
fetchMigrationJobs
fetchMigrationMetrics
get
list
projects.locations.instances.dataAccessLabels
概览
create
delete
get
list
patch
projects.locations.instances.dataAccessScopes
概览
create
delete
get
list
patch
projects.locations.instances.dataExports
概览
cancel
create
fetchServiceAccountForDataExport
fetchavailablelogtypes
get
list
patch
projects.locations.instances.dataTableOperationErrors
概览
get
projects.locations.instances.dataTables
概览
create
delete
get
list
patch
upload
projects.locations.instances.dataTables.dataTableRows
概览
bulkCreate
bulkCreateAsync
bulkDelete
bulkDeleteAsync
bulkGet
bulkReplace
bulkReplaceAsync
bulkUpdate
bulkUpdateAsync
create
delete
get
list
patch
upload
projects.locations.instances.dataTaps
概览
create
delete
get
list
patch
projects.locations.instances.dynamicParameters
概览
create
delete
export
get
import
list
patch
projects.locations.instances.emailTemplates
概览
batchDelete
create
delete
export
get
import
list
patch
projects.locations.instances.enrichmentAgent
概览
executeActions
fetchActions
fetchAlertData
projects.locations.instances.enrichmentControls
概览
create
delete
停用
get
list
projects.locations.instances.entities
概览
get
import
modifyEntityRiskScore
queryEntityRiskScoreModifications
projects.locations.instances.entitiesBlocklists
概览
create
delete
get
list
patch
projects.locations.instances.entityRiskScores
概览
个查询
projects.locations.instances.environmentGroups
概览
create
delete
get
list
patch
projects.locations.instances.environments
概览
create
delete
get
list
patch
resetWeights
projects.locations.instances.errorNotificationConfigs
概览
create
delete
get
list
patch
projects.locations.instances.events
概览
batchGet
fetchEnrichedEvent
get
import
projects.locations.instances.features
概览
停用
get
list
patch
projects.locations.instances.federationGroups
概览
create
delete
get
list
patch
projects.locations.instances.feedPacks
概览
get
list
projects.locations.instances.feedServiceAccounts
概览
fetchServiceAccountForCustomer
projects.locations.instances.feedSourceTypeSchemas
概览
list
projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
概览
list
projects.locations.instances.feeds
概览
create
delete
停用
启用
generateSecret
get
importPushLogs
list
patch
scheduleTransfer
projects.locations.instances.findingsGraph
概览
exploreNode
initializeGraph
projects.locations.instances.findingsRefinements
概览
computeFindingsRefinementActivity
create
get
getDeployment
list
patch
updateDeployment
projects.locations.instances.formDynamicParameters
概览
get
list
saveForm
projects.locations.instances.forwarders
概览
create
delete
generateForwarderFiles
get
importStatsEvents
list
patch
projects.locations.instances.forwarders.collectors
概览
create
delete
get
list
patch
projects.locations.instances.ingestionLogLabels
概览
list
projects.locations.instances.ingestionLogNamespaces
概览
list
projects.locations.instances.integrations
概览
create
delete
download
downloadDependency
exportIntegrationItems
fetchAffectedItems
fetchAgentIntegrations
fetchCommercialDiff
fetchDependencies
fetchRestrictedAgents
get
getFetchProductionDiff
getFetchStagingDiff
import
importIntegrationDependency
importIntegrationItems
list
patch
pushToProduction
pushToStaging
updateCustomIntegration
upload
projects.locations.instances.integrations.actions
概览
create
delete
executeTest
fetchActionsByEnvironment
fetchTemplate
get
list
patch
projects.locations.instances.integrations.actions.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.connectors
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.connectors.connectorInstances
概览
create
delete
fetchLatestDefinition
get
list
patch
runOnDemand
setLogsCollection
projects.locations.instances.integrations.connectors.connectorInstances.logs
概览
get
list
projects.locations.instances.integrations.connectors.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.integrations.connectors.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.integrationInstances
概览
create
delete
executeTest
fetchAffectedItems
fetchDefaultInstance
get
list
patch
projects.locations.instances.integrations.jobs
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.jobs.contextProperties
概览
clearAll
create
delete
get
list
patch
projects.locations.instances.integrations.jobs.jobInstances
概览
create
delete
get
list
patch
runOnDemand
projects.locations.instances.integrations.jobs.jobInstances.logs
概览
get
list
projects.locations.instances.integrations.jobs.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.logicalOperators
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.logicalOperators.revisions
概览
create
delete
list
回滚
projects.locations.instances.integrations.managers
概览
create
delete
fetchTemplate
get
list
patch
projects.locations.instances.integrations.managers.revisions
概览
create
delete
get
list
回滚
projects.locations.instances.integrations.transformers
概览
create
delete
executeTest
fetchTemplate
get
list
patch
projects.locations.instances.integrations.transformers.revisions
概览
create
delete
list
回滚
projects.locations.instances.investigations
概览
fetchAssociated
get
list
transitionReviewState
触发器
projects.locations.instances.investigations.investigationComments
概览
create
delete
get
list
patch
projects.locations.instances.investigations.investigationSteps
概览
get
list
projects.locations.instances.iocAssociations
概览
batchGet
fetchRelated
get
projects.locations.instances.iocs
概览
batchGet
fetchRelated
find
findFirstAndLastSeen
get
getIocState
searchCuratedDetectionsForIoc
updateIocState
projects.locations.instances.labsExperiments
概览
execute
fetchAgentSession
get
list
patch
sendAgentMessage
projects.locations.instances.labsExperiments.executions
概览
get
list
patch
projects.locations.instances.legacy
概览
legacyBatchGetCases
legacyBatchGetCollections
legacyCreateOrUpdateCase
legacyCreateSoarAlert
legacyFetchAlertsView
legacyFetchUdmSearchCsv
legacyFetchUdmSearchView
legacyFindAssetEvents
legacyFindRawLogs
legacyFindUdmEvents
legacyGetAlert
legacyGetCuratedRulesTrends
legacyGetDetection
legacyGetEventForDetection
legacyGetRuleCounts
legacyGetRulesTrends
legacyRunTestRule
legacySearchArtifactEvents
legacySearchArtifactIoCDetails
legacySearchAssetEvents
legacySearchCuratedDetections
legacySearchCustomerStats
legacySearchDetections
legacySearchDomainsRecentlyRegistered
legacySearchDomainsTimingStats
legacySearchEnterpriseWideAlerts
legacySearchEnterpriseWideIoCs
legacySearchFindings
legacySearchIngestionStats
legacySearchIoCInsights
legacySearchRawLogs
legacySearchRawLogsV2
legacySearchRuleDetectionCountBuckets
legacySearchRuleDetectionEvents
legacySearchRuleResults
legacySearchRulesAlerts
legacySearchUserEvents
legacyStreamDetectionAlerts
legacyTestRuleStreaming
legacyUpdateAlert
projects.locations.instances.legacyAdvancedReports
概览
download
legacyCopyLookerReport
legacyCreateLookerReport
legacyGetAdvancedReportProvider
legacyGetLookerReportDetails
legacyGetLookerReports
legacyRefreshLookerReports
legacyReport
legacyReportImport
legacyShareLookerReport
projects.locations.instances.legacyCaseFederationPlatforms
概览
create
legacyDeleteCaseFederationPlatform
legacyGetCaseFederationPlatform
projects.locations.instances.legacyCases
概览
addEvidence
createCase
createManualCase
createSimulatedCustomCase
deleteUseCase
executeManualAction
exportCustomCase
generateCollaboratorRequest
generateUseCases
getActionResultById
getCustomCaseDetails
getCustomCases
importCustomCase
injectSampleData
investigatorExtendCaseGraph
isCustomCaseExists
simulateAlert
projects.locations.instances.legacyConfiguration
概览
legacyGetMaximumAlertsGroupingConfiguration
projects.locations.instances.legacyFederatedCases
概览
legacyBatchPatchFederatedCases
legacyFetchCasesToSync
legacyGetFederatedCase
legacyListFederatedCases
projects.locations.instances.legacyPlaybooks
概览
LegacyPlaybookApplyApprovalLink
download
exportWorkflowWithBlocksByIdentifier
legacyActionWidgetTemplate
legacyAddOrUpdatePlaybookCategory
legacyAiGenerate
legacyAiGenerateByAlert
legacyAiUpdate
legacyAttachNestedWorkflowToCase
legacyAttachWorkflowToCase
legacyCheckWorkflowNameInDifferentEnvironments
legacyCloneWorkflow
legacyCreateFeedback
legacyDeleteWorkflow
legacyDeleteWorkflows
legacyDuplicateNestedWorkflows
legacyDuplicateWorkflow
legacyDuplicateWorkflows
legacyExecuteManualStep
legacyExecuteStep
legacyFetchActionResultsForSimulation
legacyGetActionResultsOfWFId
legacyGetAiGenerationStatusByAlert
legacyGetCaseEntities
legacyGetContextGroupByKey
legacyGetDebugStepCaseData
legacyGetEnabledWFCards
legacyGetEnabledWFNames
legacyGetHtmlViewPresets
legacyGetNestedPlaybookParams
legacyGetNestedPlaybooksAsSteps
legacyGetNestedPlaybooksByEnvironmentsAsSteps
legacyGetNestedWorkflowDefaultInputs
legacyGetOverviewTemplate
legacyGetOverviewTemplates
legacyGetPendingStep
legacyGetPendingStepsCountForUser
legacyGetPendingStepsUserRelated
legacyGetPlaybookSimulationEnrichment
legacyGetPlaybookStatsMap
legacyGetPlaybooksUsingBlocks
legacyGetTriggerTags
legacyGetWorkFlowVersionLogs
legacyGetWorkflowCategories
legacyGetWorkflowFullInfoByIdentifier
legacyGetWorkflowFullInfoWithEnvFilterByIdentifier
legacyGetWorkflowInstance
legacyGetWorkflowInstanceSummary
legacyGetWorkflowInstancesCards
legacyGetWorkflowMenuCard
legacyGetWorkflowMenuCardWithEnvFilter
legacyGetWorkflowMenuCards
legacyGetWorkflowMenuCardsWithEnvFilter
legacyGetWorkflowStepInstance
legacyGetWorkflowsContainsActionAsync
legacyGetWorkflowsInvolvingAction
legacyMoveDefinitionsToCategory
legacyPermissions
legacyPermissionsOptions
legacyRemoveCategories
legacyRerunBlock
legacyRerunPlaybook
legacyRestoreWorkflowDefinition
legacyRunPlaybookInDebug
legacySaveLogVersionOfWorkflowDefinitions
legacySaveWorkflowDefinitions
legacySkip
legacyTerminateWorkflowInstance
legacyTestPipeExample
legacyUpdateDefinitionsPriority
projects.locations.instances.legacyPublisher
概览
legacyAddConnectorPackage
legacyCloudLog
legacyCreateConnectorPackage
legacyDeleteIntegration
legacyGetDependencyFile
legacyGetHasLocallyScheduledRemoteConnectors
legacyGetInstaller
legacyGetIntegrationDependencies
legacyGetLatestIntegrationVersion
legacyGetTaskData
legacyKeepAlive
legacyListTasks
legacyPing
legacySetUpgradeInProgress
legacyUpdateIntegrationStatus
legacyUpdateTask
legacyUpdateTaskResult
projects.locations.instances.legacySdk
概览
legacyAddAgentConnectorLogs
legacyAddAgentLogs
legacyAddAttachment
legacyAddComment
legacyAddEntitiesToCustomList
legacyAddOrUpdateCaseTask
legacyAddTag
legacyAlertFullDetails
legacyAlertSourceFile
legacyAlertsFullDetails
legacyAlertsMetadata
legacyAlertsTicketIdsByCaseId
legacyAnyEntityInCustomList
legacyAssignUser
legacyAttacheWorkflowToCase
legacyAttachmentData
legacyAttachments
legacyCaseFullDetails
legacyCaseMetadata
legacyChangeCaseStage
legacyChangePriority
legacyCloseAlert
legacyCloseCase
legacyCreateCase
legacyCreateCaseInsight
legacyCreateConnectorPackage
legacyCreateEntity
legacyGetAgentById
legacyGetAlertsTicketIdsFromCasesClosedSinceTimestamp
legacyGetAlertsToSync
legacyGetCaseClosureDetails
legacyGetCaseComments
legacyGetCaseTasks
legacyGetCasesByFilter
legacyGetCasesByRequest
legacyGetCasesIdByFilter
legacyGetConnectorParameters
legacyGetContextProperty
legacyGetCurrentSiemplifyVersion
legacyGetCustomListCategories
legacyGetFailedActions
legacyGetFailedConnectors
legacyGetFailedETLOperations
legacyGetFailedJobs
legacyGetIntegrationVersion
legacyGetProxySettings
legacyGetPublisherById
legacyGetRemoteConnectorsKeysMap
legacyGetSimilarCasesIds
legacyGetSyncAlerts
legacyGetSyncCases
legacyGetUpdatedSyncAlertsMetadata
legacyGetUpdatedSyncCasesMetadata
legacyGetUserFullName
legacyIntegrationConfiguration
legacyMarkAsImportant
legacyRaiseIncident
legacyRemoveEntitiesFromCustomList
legacySendEmailWithAttachment
legacySendSystemNotification
legacySetAlertSla
legacySetCaseSla
legacySetContextProperty
legacySystemInfo
legacyTrySetContextProperty
legacyUnraiseIncident
legacyUpdateAlertPriority
legacyUpdateAlertsAdditional
legacyUpdateBatchCasesExternalCaseIds
legacyUpdateCaseScore
legacyUpdateConfigurationProperty
legacyUpdateConnectorParameter
legacyUpdateEntities
legacyUpdateNewAlertsSyncStatus
projects.locations.instances.legacySearches
概览
download
legacyCaseSearchEverything
legacyCaseSearchEverythingByIds
legacyEntitySearchCount
legacyEntitySearchEntities
legacyEntitySearchEverything
legacyGetCasesFilterUserAndRoles
legacyGetCasesFilterValues
legacyGetEntitiesFilterValues
projects.locations.instances.legacySoarAudit
概览
legacyExportAuditLastWeekAsCsvV2
legacyGetAuditDataV2
projects.locations.instances.legacySoarDashboard
概览
legacyAddOrUpdateDashboard
legacyAddOrUpdateDashboardWidget
legacyDeleteDashboard
legacyDeleteDashboardWidget
legacyGetCasesTimeToRespond
legacyGetDashboard
legacyGetDashboardCards
legacyGetDashboardCustomWidgetCaseIds
legacyGetDashboardPlaybookRuns
legacyGetDashboardPlaybooks
legacyGetDashboardWidgetCaseIds
legacyGetDashboardWidgetDefinitions
legacyGetDashboardWidgetValues
legacyGetOpenedAndClosedCasesTrends
legacyGetPlaybookMonitoring
legacyImportDashboard
legacySaveDashboardAsReportTemplate
projects.locations.instances.legacySoarIdpMappingGroups
概览
batchUpdate
create
delete
get
getExternalProviders
list
patch
updateDefaultAccessSettings
projects.locations.instances.legacySoarPermissionGroups
概览
list
projects.locations.instances.legacySoarReports
概览
download
legacyAddOrUpdateReportSchedule
legacyAddOrUpdateReportTemplate
legacyAddOrUpdateReportWidget
legacyDeleteReportSchedule
legacyDuplicateReportTemplate
legacyGetAdvancedReports
legacyGetReportSchedules
legacyGetReportTemplates
legacyImportReportTemplate
legacyRefreshAdvancedReports
legacyRemoveReportTemplate
legacyRemoveReportWidget
legacyShareAdvancedReport
legacyUploadAdvancedReport
projects.locations.instances.legacySoarSettings
概览
legacyAddVisualSummaryRecords
legacyGetAllEnvironmentCards
legacyGetAllPlaybookActionDefinitions
legacyGetCaseAlertPlaybookTriggerFilterValues
legacyGetCaseAlertTypeFilterValues
legacyGetCustomActionDetailsById
legacyGetDataSourcesForGroupingRule
legacyGetEnvironmentActionDefinitions
legacyGetEnvironmentStatistics
legacyGetPlaybookActionDefinitions
legacyGetProductsForGroupingRule
legacyGetSystemEventEntityTypes
legacyGetTimeZones
legacyGetUserRegistrationSettings
legacyGetVisualSummaryRecords
legacyIsPermittedToEnvironment
legacyTestEmailSettings
legacyUploadCustomActionResultJson
projects.locations.instances.legacySoarUsers
概览
delete
get
getLocalization
getNotificationSettings
list
updateLocalization
updateNotificationSettings
projects.locations.instances.legacySoarUsers.attachments
概览
delete
download
get
list
upload
projects.locations.instances.legacySoarUsers.userNotifications
概览
计数
get
list
markAsRead
projects.locations.instances.legacySoarUsers.workdeskContacts
概览
create
delete
get
list
patch
projects.locations.instances.legacySoarUsers.workdeskLinks
概览
create
delete
get
list
patch
projects.locations.instances.legacySoarUsers.workdeskNotes
概览
create
delete
get
list
patch
projects.locations.instances.legacySystem
概览
legacyGetLicenseStatus
legacyGetMaximumDataRetentionValue
legacyGetSystemVersion
projects.locations.instances.legacySystemMetadata
概览
占位符
projects.locations.instances.logProcessingPipelines
概览
associateStreams
create
delete
dissociateStreams
fetchAssociatedPipeline
fetchSampleLogsByStreams
get
list
patch
testPipeline
projects.locations.instances.logTypes
概览
create
generateEventTypesSuggestions
getLogTypeSetting
legacySubmitParserExtension
list
runAnalysis
runParser
search
updateLogTypeSetting
projects.locations.instances.logTypes.analysisReports
概览
get
list
projects.locations.instances.logTypes.logTypeSettings
概览
list
projects.locations.instances.logTypes.logs
概览
import
list
projects.locations.instances.logTypes.parserExtensions
概览
activate
create
delete
get
list
projects.locations.instances.logTypes.parserExtensions.extensionValidationReports
概览
get
list
projects.locations.instances.logTypes.parserExtensions.extensionValidationReports.validationErrors
概览
list
projects.locations.instances.logTypes.parserExtensions.validationReports
概览
get
projects.locations.instances.logTypes.parserExtensions.validationReports.parsingErrors
概览
list
projects.locations.instances.logTypes.parsers
概览
activate
activateReleaseCandidateParser
复制
create
deactivate
delete
fetchParserCandidates
get
list
patch
runAnalysis
projects.locations.instances.logTypes.parsers.analysisReports
概览
get
list
projects.locations.instances.logTypes.parsers.validationReports
概览
get
projects.locations.instances.logTypes.parsers.validationReports.parsingErrors
概览
list
projects.locations.instances.logs
概览
分类
projects.locations.instances.managedDomainSettings
概览
addManagedDomain
removeManagedDomain
projects.locations.instances.marketplaceIntegrations
概览
fetchCommercialDiff
get
安装
list
uninstall
projects.locations.instances.metricDefinitions
概览
create
get
list
patch
projects.locations.instances.moduleSettings
概览
get
list
rebrandingSettings
projects.locations.instances.moduleSettings.properties
概览
batchUpdate
get
list
patch
testSettings
projects.locations.instances.nativeDashboards
概览
addChart
create
delete
duplicate
duplicateChart
editChart
export
get
getIamPolicy
import
list
patch
removeChart
setIamPolicy
projects.locations.instances.notebooks
概览
get
list
projects.locations.instances.ontologyRecords
概览
delete
export
系列
get
import
list
patch
统计信息
projects.locations.instances.ontologyRecords.mappingRules
概览
delete
fetchAll
get
list
patch
保存
测试
projects.locations.instances.ontologyRecords.visualFamilies
概览
create
delete
export
get
import
list
patch
projects.locations.instances.operations
概览
cancel
delete
get
list
streamSearch
projects.locations.instances.propertySchemaDefinitions
概览
create
delete
get
list
patch
projects.locations.instances.referenceLists
概览
create
get
list
patch
projects.locations.instances.remoteAgents
概览
connectorValidRemoteAgents
create
delete
fetchEditableRemoteAgents
fetchInstallationCommand
fetchInstallerFile
fetchRedeployStatus
fetchRemoteAgentsCompatibleWithJobs
fetchRemoteAgentsInformation
get
list
migrateConnectors
patch
redeployRemoteAgent
sendRemoteAgentInstaller
upgradeRemoteAgent
projects.locations.instances.requestTemplates
概览
create
delete
get
list
patch
projects.locations.instances.ruleExecutionErrors
概览
list
projects.locations.instances.rules
概览
create
delete
get
getDeployment
list
listRevisions
modifyRules
patch
updateDeployment
projects.locations.instances.rules.deployments
概览
list
projects.locations.instances.rules.retrohunts
概览
create
get
list
projects.locations.instances.savedColumnSets
概览
create
delete
get
list
patch
projects.locations.instances.searchSessions.searchedResults
概览
list
projects.locations.instances.sharedPreferenceSets
概览
create
delete
get
list
patch
projects.locations.instances.slaDefinitions
概览
create
delete
export
get
import
list
patch
projects.locations.instances.soarDomains
概览
create
delete
export
get
import
list
patch
projects.locations.instances.soarNetworks
概览
create
delete
deleteAll
export
get
import
list
patch
projects.locations.instances.socRoles
概览
create
delete
get
list
patch
projects.locations.instances.systemNotifications
概览
计数
get
list
markAsRead
projects.locations.instances.tasks
概览
create
delete
get
list
patch
projects.locations.instances.tenants
概览
create
list
patch
projects.locations.instances.threatCollections
概览
fetchEntityMetadata
fetchIocMatchMetadata
fetchRelated
get
list
projects.locations.instances.uniqueEntities
概览
addNote
download
fetchFull
get
list
patch
projects.locations.instances.userModuleSettings
概览
update
projects.locations.instances.users
概览
clearConversationHistory
getPreferenceSet
updatePreferenceSet
projects.locations.instances.users.conversations
概览
create
delete
get
list
patch
projects.locations.instances.users.conversations.messages
概览
create
delete
get
list
patch
projects.locations.instances.users.savedColumnSets
概览
create
delete
get
list
patch
projects.locations.instances.users.searchQueries
概览
create
delete
get
getIamPolicy
list
patch
setIamPolicy
projects.locations.instances.views
概览
fetchPredefined
get
list
saveOverviewTemplate
projects.locations.instances.watchlists
概览
create
delete
get
list
listEntities
patch
projects.locations.instances.watchlists.entities
概览
添加
batchAdd
batchRemove
remove
projects.locations.instances.webhooks
概览
WebhookIngestion
create
delete
exportLogs
get
getLogs
getStatistics
list
patch
revokeUrl
类型
ActionType
AgentSettings
AlertCard
AlertCardSla
AlertCountByRule
AlertFieldAggregations
AlertOverviewWidget
ApiActionResultDataModel
ApiAdvancedReport
ApiDeleteWorkflowResult
ApiLoopIterationRequest
ApiSecurityEntityDataModel
ApiWorkflowCategoryDataModel
ApiWorkflowDebugDataModel
ApiWorkflowDefinitionDataModel
ApiWorkflowInstanceDataModel
ApiWorkflowMenuCardDefinitionDataModel
ApiWorkflowStepDataModel
ApiWorkflowStepInstanceDataModel
ApiWorkflowStepParameterDataModel
ApiWorkflowStepRelationDataModel
ApiWorkflowTriggerDataModel
ArtifactIndicator
AssetAlertEvent
AssetEdrEvent
AssetIndicator
BatchUpdateCustomFieldValuesResponse
BigQueryExport
BucketSize
BulkDataTableAsyncMediaResponse
CalculateFieldEnum
CaseApsGrapthWidget
CaseAssistantWidget
CaseDescriptionWidget
CaseImpactedResourcesWidget
CaseInsightSeverity
CaseInsightType
CasePriority
CaseRecommendationsWidget
CaseRelatedFindingsWidget
CaseType
Chip
引用
CloseReasonEnum
ContentPackItemInstallationResponse
ContentSourceType
ContextGroupDataModel
CuratedRuleCount
CuratedRulePrecision
CustomSimulatedCaseKeyValue
CustomWidgetSubjectEnum
DashboardTimeRangeTypesEnums
DashboardView
DataSource
DataTableRowDetails
DemoDataComponent
DetectionCountBucket
DetectionExclusionApplication
DetectionView
DetectionWithSamples
DomainAndPorts
DomainAndTime
EnrichmentProvenance
EntitiesHighlightWidget
EntityIndicator
EntityRiskScoreModification
EntryMetadata
ErrorMessage
EventHighlightsWidget
EventType
EventsWidget
ExplorationOptions
FeedSourceType
FieldAndValue
FieldExtractors
FilterOperatorAndValues
FilterProperties
FindingsRefinementActivity
FindingsRefinementDeployment
FormWidget
ForwarderMetadata
FrontendPathConfig
GetPolicyOptions
图表
GraphWidget
HtmlWidget
HttpDetails
HttpMethod 类中的静态变量
HttpProtocol
IdAndPath
输入源
InsightsWidget
InstallationType
IntRange
IntegrationDiff
IocEvent
IocState
IpAndPorts
IpNetworkEvent
JobMigrationState
JsonResultsWidget
KeyValueWidget
LabsOptions
LanguageFeature
LegacyAdvancedReportCategory
LegacyApiActionDefinitionDataModel
LegacyApiMetadata
LegacyApiObjectDataModel
LegacyCase
LegacyCaseApiSecurityEntityDataModel
LegacyCaseInfo
LegacyCaseSearchEverythingResponse
LegacyDashboardWidgetDataModel
LegacyEntitySearchEverythingResult
LegacyFederatedCase
LegacyGetLookerReportsResponse
LegacyLookerReportResponse
LegacyPlaybookAiGenerationByAlertResult
LegacyPlaybookApiTriggerCondition
LegacyPlaybookOverviewTemplateData
LegacyPlaybookTemplateWidgetDefinition
LegacyPlaybookWorkflowAccessPermissions
LegacyRuleTrends
LegacySoarDashboardDataModel
LegacySoarDashboardWidgetDataModel
LegacyTask
链接
ListContextPropertiesResponse
ListCustomFieldValuesResponse
ListParserAnalysisReportsResponse
ListParsingErrorsResponse
ListSavedColumnSetsResponse
LogType
LogTypeSetting
ManagedDomain
MitreTactic
MitreTechnique
NativeDashboardView
NextPageToken
NoLogEnrichmentSource
节点
NotificationSettings
OverviewData
Paging
PendingCompletionCard
PlacerRowInfo
PlaybookCreationSourceEnum
PlaybooksAiServiceGenerationResponseMetadata
政策
PotentiallyGroupedAlertsWidget
PreferenceSet
QuickActionButton
QuickActionInstanceConfiguration
QuickActionParameterValue
QuickActionsWidget
RawLogResult
ReferenceListView
RegexFilter
ResultsOrder
RetentionDuration
RiskConfig
RuleCompilationError
RuleDeployment
RuleOverviewWidget
RuleSource
RuleType
RuleView
RuntimeError
ScriptResultEntityData
SearchResult
SearchTimeRangeType
SecurityEntity
严重级别
ShareConfig
SidebarEntry
SiemAlertsWidget
SLA
SortBy
State
StatisticsWidget
TargetScopeEnum
TextWidget
ThirdPartyWidget
ThreatDetectionOpportunity
时间轴
TimelineWidget
TtrKeyInfo
UdmColumnType
UdmEventInfo
UdmProvenance
UpdateCustomFieldValuesRequest
UploadSamlSettings
UserEvent
UserFacingRuleType
UserIndicator
UserLocalization
WallActivitiesWidget
WidgetApiWorkflowStepParameterDataModel
WidgetContextGroup
WidgetFieldGroupData
WidgetResultStatus
WidgetTemplateGridColumns
WidgetTemplateType
WidgetWidthSizeTypes
WorkflowInstance
WorkflowPendingStepsWidget
YaraL2Detection
REST API
共享类型
类型
AccountType
操作
ActionType
AgentStatsEvent
AggregateFunction
AlertState
AnalyticsMetadata
AppCompatMetadata
ApplicationProtocol
制品
素材资源
AssetType
关联
AssociationType
AtiPrioritization
Attribute
AuthType
Authentication
AuthenticationStatus
BrowserType
BrowserVariantType
BufferStats
CancelOperationRequest
频道
云端
CloudEnvironment
连接状态
ContainerProcess
ContainerStats
CookieSameSite
DataAccessIngestionLabel
DataAccessLabels
日期
DayOfWeek
DeleteOperationRequest
DeploymentStatus
尺寸
方向
方向性
EnrichmentSource
EnrichmentState
EnrichmentType
实体
EntityLabel
EntityRisk
EntityType
EventTimestampAttribute
EventType
Extensions
ExternalEnrichmentSource
家人
FeaturedContentMetadata
FileType
FindingVariable
GetOperationRequest
GroupedFields
HttpBody
InputStatsEvent
间隔
IoCStatsType
IpProtocol
标签
ListOperationsRequest
ListOperationsResponse
位置信息
LogEntryBatchMetrics
机制
MediaRequestInfo
MediaResponseInfo
MessageSet
MessageType
元数据
MetricName
命名空间
网络
通知类型
名词
OSType
OSVariantType
OpCode
结果
PcapStats
权限
PermissionType
平台
普及率
优先级
ProductConfidence
ProductPriority
ProductSeverity
RUsage
原因
RecordType
ReferenceType
婚恋
信誉
类
资源
ResourceType
角色
SSLCertificate
SecurityCategory
SecurityResult
ServiceType
严重级别
SourceType
StartupType
State
StatsEvent
Status
StatusProto
TaskLogonType
TaskState
ThreatCollectionType
ThreatStatus
ThreatVerdict
TimeOfDay
TokenElevationType
流量类别
TriggerType
类型
UDM
UrlVisitType
UserAgentProto
判定
VerdictResponse
VerdictType
VisitSource
漏洞
API 配额
Chronicle API 提取方法
客户端库和 SDK
MCP 参考文档
概览
工具
get_case
list_case_comments
list_cases
update_case
get_case_alert
list_case_alerts
update_case_alert
create_case_comment
execute_bulk_close_case
execute_manual_action
get_connector_event
list_connector_events
create_data_table
add_rows_to_data_table
list_data_tables
list_data_table_rows
delete_data_table_row
generate_threat_detection_opportunity
generate_synthetic_events
evaluate_rule_coverage
evaluate_rule_coverage_long_running
generate_rules
summarize_entity
get_involved_entity
list_involved_entities
search_entity
udm_search
translate_udm_query
import_logs
list_feeds
get_feed
enable_feed
disable_feed
delete_feed
create_feed
update_feed
generate_feed_secret
list_integrations
list_integration_actions
list_integration_instances
get_ioc_match
list_playbook_instances
list_playbooks
list_security_alerts
get_security_alert
update_security_alert
get_parser
run_parser
activate_parser
create_parser
deactivate_parser
list_parsers
list_log_types
list_rules
list_rule_errors
create_rule
get_rule
validate_rule
list_rule_detections
create_reference_list
get_reference_list
update_reference_list
get_alert_latest_investigation
get_investigation_by_id
trigger_investigation
get_agent_settings
fetch_alert_data
fetch_enrichment_actions
execute_actions
get_operation
Terraform 参考文档
Backstory API 参考文档
DataTap 配置参考文档
Detection Engine API 参考文档
Feed Management API 参考文档
参考列表 API 参考文档
Search API 参考文档
Forwarder Management API 参考文档
Customer Management API 参考文档
Data Export API 参考文档
Data Export API(增强版)
Backstory API 配额
旧版 SOAR API 参考文档
SOAR API 概览
向旧版 SOAR API 进行身份验证
UDM 和数据架构
UDM 字段字典参考信息
UDM 使用指南
时间戳定义
SOAR BigQuery 架构参考文档
注入指标表
Looker 和 BigQuery 的注入指标参考
BigQuery 中的事件架构参考
信息中心的 SOAR 数据基础
解析器参考
解析器语法参考文档
缓冲和重试配置
YARA-L 2.0 参考文档
开始使用
语法
元部分
“活动”部分
匹配部分
结果部分
“Conditions”(条件)部分
“选项”部分
表达式、运算符和其他结构
嵌套 if 语句
在条件部分中使用 OR 语法
将 N OF 语法与事件变量搭配使用
重复字段
参考列表
参考列表语法
检测事件抽样
应用 YARA-L 2.0 开窗逻辑
函数
查询和调查
在 YARA-L 2.0 查询中使用聚合
在搜索和信息中心中使用条件
在搜索中使用指标
使用选择和取消选择关键字来控制列
创建多阶段查询
异步搜索 API
开发检测规则
在规则中指定实体风险得分
将指标函数用于风险分析规则
构建复合检测规则
管理和问题排查
查看和排查规则错误
YARA-L 已知问题
参考:查询库和过渡
YARA-L 中的单事件规则和多事件规则
YARA-L 2.0 信息中心查询库
从 SPL 过渡到 YARA-L 2.0
使用 Gemini 生成 YARA-L 2.0 规则
内容中心参考
响应集成
集成列表
A - B - C
Active Directory
Akamai
Alexa
AlgoSec
AlienVault USM Anywhere
AlienVault USM 设备
AlienVaultTI
Amazon Macie
Anomali
Anomali Staxx
Anomali ThreatStream