Method: legacy.legacySearchArtifactIoCDetails

Full name: projects.locations.instances.legacy.legacySearchArtifactIoCDetails

Rpc to search for IoC details for a particular artifact.

HTTP request


Path parameters

Parameters
instance

string

Required. Chronicle instance this request is sent to. Format: projects/{project}/locations/{location}/instances/{instance}

Query parameters

Parameters
artifactIndicator

object (ArtifactIndicator )

Required. Artifact of interest.

Request body

The request body must be empty.

Response body

Response message for SearchArtifactIoCDetailsResponse. NEXT TAG: 4

If successful, the response body contains data with the following structure:

JSON representation 
{
 "feeds": [
 {
 object (Feed )
 }
 ]
}
Fields
feeds[]

object (Feed )

Empty if this domain wasn't identified as an IoC by any feed.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacies.legacySearchArtifactIoCDetails

For more information, see the IAM documentation.

Feed

JSON representation 
{
 "metadata": {
 object (FeedMetadata )
 },
 "iocs": [
 {
 object (IocEvent )
 }
 ]
}
Fields
metadata

object (FeedMetadata )
iocs[]

object (IocEvent )

FeedMetadata

JSON representation 
{
 "title": string,
 "description": string,
 "link": {
 object (Link )
 },
 "confidenceScoreBucket": {
 object (IntRange )
 }
}
Fields
title

string
description

string
confidenceScoreBucket

object (IntRange )

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025年09月22日 UTC.