POST
/
detection
curl --request POST \
  --url https://api.wirespeed.co/detection \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "size": 123,
  "page": 123,
  "filter": "<string>",
  "search": "<string>",
  "orderBy": "<string>",
  "orderDir": "asc",
  "caseIdOrSid": "<string>",
  "statuses": [
    "NEW"
  ],
  "verdict": "MALICIOUS",
  "assetId": "<string>",
  "assetType": "USER",
  "hideExcluded": true,
  "onlyWasEscalated": true,
  "onlyWasContained": true,
  "hideDemoClients": true,
  "categoryClass": "ENDPOINT",
  "category": "OTHER__DIAGNOSTIC",
  "exclusionId": "<string>"
}'
{
  "data": [
    {
      "id": "<string>",
      "teamId": "<string>",
      "teamName": "<string>",
      "sourceDescription": "<string>",
      "notes": "<string>",
      "sourceName": "<string>",
      "description": "<string>",
      "status": "NEW",
      "createdAt": "<string>",
      "containments": [
        "USER"
      ],
      "testMode": true,
      "caseId": "<string>",
      "sourceIngestedAt": "<string>",
      "sourceDetectedAt": "<string>",
      "verdictedAt": "<string>",
      "updatedAt": "<string>",
      "closedAt": "<string>",
      "logs": [
        {
          "log": "<string>",
          "timestamp": "<string>",
          "debug": true
        }
      ],
      "raw": {},
      "verdict": "MALICIOUS",
      "title": "<string>",
      "integrationPlatform": "microsoft-teams",
      "integrationId": "<string>",
      "duplicateDetectionId": "<string>",
      "contained": true,
      "nextSteps": "<string>",
      "reingested": true,
      "prevented": true,
      "excludeFromMeans": true,
      "caseSid": "<string>",
      "sid": "<string>",
      "firstRun": true,
      "containOnChatOpsFailure": true,
      "wasEscalated": true,
      "chatOpsPerformed": true,
      "ocsfDetectionFinding": {},
      "actionSlug": "<string>",
      "exclusionId": "<string>",
      "exclusionSid": "<string>",
      "autoContained": true,
      "category": "OTHER__DIAGNOSTIC",
      "verdictSetting": {
        "id": "<string>",
        "default": true,
        "managedByWspd": true,
        "category": "OTHER__DIAGNOSTIC",
        "wspdRule": "CLOUD__INVOCATION",
        "escalate": true,
        "chatOps": true,
        "close": true,
        "disabled": true,
        "containUser": true,
        "containEndpoint": true,
        "chatOpsMFA": true,
        "managerChatOps": true,
        "vipChatOps": true,
        "createdAt": "<string>",
        "updatedAt": "<string>",
        "teamId": "<string>",
        "chatOpsTimeoutVerdict": "MALICIOUS",
        "chatOpsUnsureVerdict": "MALICIOUS",
        "verdict": "MALICIOUS",
        "description": "<string>",
        "managedByParent": true,
        "severity": "INFORMATIONAL",
        "useSourceSeverity": true
      },
      "chatOpsTest": true,
      "severity": "INFORMATIONAL",
      "severityOrdinal": 123,
      "containsVIP": true,
      "containsHVA": true,
      "excluded": true,
      "chatOpsTestEmail": "<string>",
      "chatOpsTestPhoneNumber": "<string>"
    }
  ],
  "totalCount": 123
}

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Response

200 - application/json

The response is of type object.