{"components":{"schemas":{"AggregatedAlertRef":{"description":"Metadata about an aggregated alert that belongs to a parent alert bucket.","properties":{"created_at":{"description":"The time the child alert was created.","format":"date-time","readOnly":true,"type":"string"},"doc_type":{"description":"The document type of the child alert.","readOnly":true,"type":"string"},"has_analysis":{"description":"A boolean indicating if the child alert has analysis or file attachments.","readOnly":true,"type":"boolean"},"id":{"description":"The ID of the aggregated chid alert.","readOnly":true,"type":"string"},"monitor_id":{"description":"The ID of the monitor that generated the child alert.","readOnly":true,"type":"string"},"status":{"description":"The status of the child alert.","enum":["new","read","escalated","in_progress","closed","no_action_required","duplicate","not_relevant","tracked_external"],"readOnly":true,"type":"string"},"tags":{"description":"The tags of the child alert.","items":{"type":"string"},"maxItems":100,"type":"array"}},"title":"Aggregated Alert Reference","type":"object"},"Alert":{"description":"An alert is created for each monitor that has at least one matching condition. The alert includes details and context regarding the (raw) document matched, the topics/labels matched from the monitor, as well as the labels and topics identified within the (raw) document.","properties":{"aggregated_added_at":{"description":"Only applicable to alert buckets, this field is the timestamp at which the most recent child alert was aggregated into the bucket.","format":"date-time","readOnly":true,"type":"string"},"aggregated_alert_count":{"description":"Only applicable to alert buckets, and indicates the number of alerts aggregated into this bucket alert.","readOnly":true,"type":"integer"},"aggregated_alert_count_new":{"description":"Only applicable to alert buckets, and indicates the number of alerts with new status in this bucket alert.","readOnly":true,"type":"integer"},"aggregated_alerts":{"description":"Only applciable to alert buckets, this field contains metadata about each child alert aggregated into this bucket.","items":{"$ref":"#/components/schemas/AggregatedAlertRef"},"readOnly":true,"type":"array"},"aggregated_under_id":{"description":"Only applicable to child alerts that are aggregated into a bucket, this field is the ID of the parent bucket alert.","readOnly":true,"type":"string"},"ai_doc_summary":{"description":"If the group has the AI features enabled, this field will contain the AI analysis summary.","readOnly":true,"type":"string"},"alert_summary":{"description":"The summary of the alert.","readOnly":true,"type":"string"},"alert_type":{"description":"The type of this alert.","enum":["Compromised Credentials","Domain Discovery","Forum Post","Message","Paste","Shop Listing","Tweet","Web Content"],"readOnly":true,"type":"string"},"analysis":{"description":"If analysis has been added to the alert, then this property contains the analysis text.","example":"Sample analysis text and can be markdown format.","readOnly":false,"type":"string"},"attachments":{"description":"File attachments associated with the alert as part of the alert's analysis.","items":{"$ref":"#/components/schemas/FileAttachment"},"readOnly":true,"type":"array"},"created_at":{"description":"The time this alert was created at.","example":"2021-08-23T18:02:53Z","readOnly":true,"type":"string"},"doc":{"oneOf":[{"$ref":"#/components/schemas/message"},{"$ref":"#/components/schemas/paste"},{"$ref":"#/components/schemas/shop_listing"},{"$ref":"#/components/schemas/tweet"},{"$ref":"#/components/schemas/web_content_publish"},{"$ref":"#/components/schemas/forum_post"},{"$ref":"#/components/schemas/domain_discovery"}],"readOnly":true},"doc_matches":{"description":"Any document matches generated for this alert.","items":{"$ref":"#/components/schemas/Doc_match"},"readOnly":true,"type":"array"},"doc_url":{"description":"The URL to the document that triggered this alert.","format":"uri","readOnly":true,"type":"string"},"email_sent_at":{"description":"If email notifications are used for this alert, the timestamp the alert email was sent.","readOnly":true,"type":"string"},"has_analysis":{"description":"True if the alert has analysis text or file attachments and false otherwise.","readOnly":true,"type":"boolean"},"id":{"description":"The ID of the alert.","example":"c4hu5j8mhcmiku5g7ieg","readOnly":true,"type":"string"},"indicator_attributions":{"items":{"$ref":"#/components/schemas/IndicatorAttribution"},"readOnly":true,"type":"array"},"indicator_mscore":{"maximum":100,"minimum":0,"readOnly":true,"type":"integer"},"label_matches":{"description":"Any labels that matched for this alert.","items":{"$ref":"#/components/schemas/Label_match"},"readOnly":true,"type":"array"},"labels":{"description":"The labels itentified in the document that triggered this alert.","items":{"$ref":"#/components/schemas/Label"},"readOnly":true,"type":"array"},"labels_url":{"description":"The URL to the labels identified in the document that triggered this alert.","format":"uri","readOnly":true,"type":"string"},"meets_password_policy":{"description":"If the monitor that created the alert includes a password policy, this value indicates if the alert (when applicable) has a password that meets the policy.","readOnly":true,"type":"boolean"},"monitor_id":{"description":"The ID of the monitor that generated this alert.","example":"c4fbb52bqsiatib6i4gg","readOnly":true,"type":"string"},"monitor_name":{"description":"The name of the monitor that generated this alert.","readOnly":true,"type":"string"},"monitor_version":{"description":"The version of the monitor that generated this alert.","readOnly":true,"type":"integer"},"relevance_class":{"description":"The relevance class suggested for this alert.","enum":["benign","malicious"],"type":"string"},"relevance_probability":{"description":"The relevance probability suggested for this alert.","readOnly":true,"type":"number"},"status":{"description":"The status of this alert.","enum":["new","closed","read","escalated","in_progress","no_action_required","duplicate","not_relevant","tracked_external"],"type":"string"},"tags":{"description":"The tags set for this alert.","items":{"type":"string"},"readOnly":false,"type":"array"},"title":{"description":"The title of this alert.","readOnly":true,"type":"string"},"topic_matches":{"description":"Any topic matches the monitor generated for this alert.","items":{"$ref":"#/components/schemas/Topic_match"},"readOnly":true,"type":"array"},"topics":{"description":"The topics that were identified in the document that triggered this alert.","items":{"$ref":"#/components/schemas/Topic"},"readOnly":true,"type":"array"},"topics_url":{"description":"The URL to the toics identified in the document that triggered this alert.","format":"uri","readOnly":true,"type":"string"},"updated_at":{"description":"The time this alert was last updated at.","example":"2021-08-23T18:02:53Z","readOnly":true,"type":"string"}},"required":["id","monitor_id","created_at","updated_at","topic_matches","doc_matches","doc_url","labels_url","topics_url","status","alert_type","alert_summary","title","label_matches","indicator_attributions","monitor_version"],"title":"Alert","type":"object"},"AlertAnalysisOp":{"description":"The analysis text for an alert. This can be in markdown format.","properties":{"analysis":{"description":"The analysis text that can be in markdown format.","readOnly":false,"type":"string"}},"title":"Alert Analysis Operation","type":"object"},"AlertAuditRecord":{"description":"Metadata regarding an operation performed on an alert.","properties":{"alert_id":{"description":"The ID of the alert that was operated on.","readOnly":true,"type":"string"},"history_created_at":{"description":"The time the operation was performed.","format":"date-time","readOnly":true,"type":"string"},"id":{"description":"The ID of the audit record.","readOnly":true,"type":"string"},"monitor_id":{"description":"The ID of the monitor that created the alert.","readOnly":true,"type":"string"},"operation":{"description":"The operation performed on the alert.","enum":["read","update","rollback","delete","update_analysis","delete_analysis","create_attachment","delete_attachment","add_tags","remove_tags","download"],"readOnly":true,"type":"string"},"previous_status":{"description":"The status of the alert prior to the operation.","readOnly":true,"type":"string"},"to_status":{"description":"The status of the alert after the operation.","readOnly":true,"type":"string"},"user_email":{"description":"The username that performed the operation.","readOnly":true,"type":"string"},"user_id":{"description":"The ID of the user that performed the operation.","readOnly":true,"type":"string"}},"title":"Alert Audit Record","type":"object"},"AlertAuditRecords":{"description":"List of alert audit records.","properties":{"history":{"description":"The list of alert audit records.","items":{"$ref":"#/components/schemas/AlertAuditRecord"},"type":"array"}},"title":"Alert Audit Records","type":"object"},"AlertBulk":{"description":"Request body for bulk alert operations.","properties":{"patch":{"items":{"$ref":"#/components/schemas/AlertBulkOp"},"maxItems":1000,"type":"array"}},"required":["patch"],"title":"Bulk Alert Request","type":"object"},"AlertBulkApplyOp":{"description":"The changes to apply to alerts meeting the query criteria.","properties":{"add_tags":{"description":"Tags to add on any alerts updated. Duplicate tags will not be created on any alert.","items":{"type":"string"},"type":"array"},"exlcude_ids":{"description":"If provided, an array of alert IDs that should be explictly skipped during the update operation.","items":{"type":"string"},"type":"array"},"remove_tags":{"description":"Tags to remove on any alerts updated.","items":{"type":"string"},"type":"array"},"status":{"description":"The status to apply to the alerts.","enum":["new","read","escalated","in_progress","closed","no_action_required","duplicate","not_relevant","tracked_external"],"type":"string"}},"title":"Bulk Alert Apply Operation","type":"object"},"AlertBulkOp":{"description":"An alert bulk operation to apply in a bulk request.","properties":{"id":{"description":"The ID of the alert.","type":"string"},"status":{"description":"The status to set for the alert.","enum":["new","read","escalated","in_progress","closed","no_action_required","duplicate","not_relevant","tracked_external"],"type":"string"},"tags":{"description":"The tags to set for the alert and will replace any existing tags on the alert.","items":{"type":"string"},"maxItems":100,"type":"array"}},"required":["id"],"title":"Bulk Alert Operation","type":"object"},"Alerts":{"description":"A list of alerts.","properties":{"alerts":{"items":{"$ref":"#/components/schemas/Alert"},"readOnly":true,"type":"array"}},"required":["alerts"],"title":"Alerts","type":"object"},"Condition":{"description":"A Condition forms the basis for querying topics and labels in monitors. It can be used to form complex conditions using all/any as well as specifying specific values to match for documents. See the user guide for more details.","properties":{"match":{"description":"The match values, or sub Conditions.","items":{"$ref":"#/components/schemas/Condition"},"type":"array"},"operator":{"description":"The operator to use for this Condition.","enum":["must_equal","must_not_equal","must_start_with","must_not_start_with","must_end_with","must_not_end_with","must_contain","must_not_contain","any","all"],"type":"string"},"topic":{"description":"The topic to apply this Condition to.","enum":["doc_type","source","match_conditions","credential_domain","typosquatted_domain","keyword","lucene","group_bin","group_brand","group_crypto","group_hash","group_identity","group_keys","group_location","group_network","group_paths","group_social","group_threats","label_industry","label_language","label_threat","label_type","bin","bin_foreign","bin_partial","organization","product","name","brand","product_batch_name","atom_address","bch_address","btc_address","dash_address","doge_address","ltc_address","xlm_address","xmr_address","zec_address","sha1_hash","sha256_hash","md5_hash","client_identifier","email_address","identity_name","twitter_handle","telegram_user_name","phone_number","access_token","crypto_key_private","crypto_key_public","password_plaintext","predict_password_plaintext","location_name","city","country","ipv4_address","ipv6_address","domain","mac_address","url","filename","path","registry_key","hashtag","icq_uin","jid","cve","threat_name","threat_group_name","service_name","cwe"],"type":"string"}},"required":["operator","topic","match"],"title":"Condition","type":"object"},"Doc":{"description":"A ingested/indexed raw document including thet topics and labels created from the doc by our Analytics processing.","properties":{"doc":{"description":"The raw document.","oneOf":[{"$ref":"#/components/schemas/message"},{"$ref":"#/components/schemas/paste"},{"$ref":"#/components/schemas/shop_listing"},{"$ref":"#/components/schemas/tweet"},{"$ref":"#/components/schemas/web_content_publish"},{"$ref":"#/components/schemas/forum_post"},{"$ref":"#/components/schemas/domain_discovery"}]},"labels":{"description":"The labels identified in the raw document.","items":{"$ref":"#/components/schemas/Label"},"readOnly":true,"type":"array"},"labels_url":{"description":"The URL to the labels for this document.","format":"uri","readOnly":true,"type":"string"},"topics":{"description":"The topics identified in the raw document.","items":{"$ref":"#/components/schemas/Topic"},"readOnly":true,"type":"array"},"topics_url":{"description":"The URL to the topics for this document.","format":"uri","readOnly":true,"type":"string"}},"required":["labels_url","topics_url"],"title":"Raw Source Document","type":"object"},"Doc_match":{"description":"A Doc Match represents the doc query that was matched for a monitor alert.","properties":{"locations":{"description":"A list of locations for the match.","items":{"$ref":"#/components/schemas/Location"},"minItems":1,"readOnly":true,"type":"array"},"match_path":{"description":"The JSON field path of the match.","example":"tweet.body","readOnly":true,"type":"string"}},"required":["match_path","locations"],"title":"Doc Match","type":"object"},"DocSearchResponse":{"description":"Response body for a document search. If if timed out, the search request can be scoped using date ranges.","properties":{"docs":{"description":"The list of raw documents found in the search.","items":{"oneOf":[{"$ref":"#/components/schemas/message"},{"$ref":"#/components/schemas/paste"},{"$ref":"#/components/schemas/shop_listing"},{"$ref":"#/components/schemas/tweet"},{"$ref":"#/components/schemas/web_content_publish"},{"$ref":"#/components/schemas/forum_post"},{"$ref":"#/components/schemas/domain_discovery"}]},"type":"array"},"timed_out":{"description":"If true, the document searching timed out and the query should be scored with a date range.","readOnly":true,"type":"boolean"},"total_docs":{"description":"The estimated number of documents that matched the search.","type":"integer"}},"required":["timed_out","total_docs"],"title":"Document Search Response","type":"object"},"EmailRecipient":{"description":"An email recipient.","properties":{"email_address":{"description":"The email address of the recipient.","format":"email","type":"string"},"status":{"description":"The status of the email address verification.","enum":["invalid","pending","verified","expired"],"readOnly":true,"type":"string"},"verification_sent_at":{"description":"The timestamp an email verification was sent at for this email address.","format":"date-time","readOnly":true,"type":"string"}},"required":["email_address"],"title":"Email Recipient","type":"object"},"EmailRecipients":{"description":"A list of email recipients.","properties":{"recipients":{"description":"The list of email addresses for receipients.","items":{"format":"email","type":"string"},"type":"array"}},"required":["recipients"],"title":"Email Recipients","type":"object"},"EmailSetting":{"description":"Email notification settings.","properties":{"created_at":{"description":"The timestamp this email setting was created.","format":"date-time","readOnly":true,"type":"string"},"delivery_times":{"description":"The delivery times specified for scheduled emails.","items":{"enum":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"type":"string"},"type":"array"},"frequency":{"description":"The frequency at which scheduled emails are delivered.","items":{"enum":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"],"type":"string"},"type":"array"},"id":{"description":"The ID of the email settings.","readOnly":true,"type":"string"},"recipients":{"description":"The recipients to receive emails.","items":{"$ref":"#/components/schemas/EmailRecipient"},"type":"array"},"timezone_location":{"description":"The timezone location to use for scheduled emails.","type":"string"},"updated_at":{"description":"The timestamp this email setting was last updated.","format":"date-time","readOnly":true,"type":"string"}},"title":"Email Setting","type":"object"},"EmailSettings":{"description":"List of email settings.","properties":{"email_settings":{"description":"The list of email settings.","items":{"$ref":"#/components/schemas/EmailSetting"},"type":"array"}},"title":"Email Settings","type":"object"},"Entity_location":{"description":"The location of a Topic (entity) identified within a (raw) document","properties":{"element_path":{"description":"The JSON field path at which the entity was found in the raw document.","example":"body","readOnly":true,"type":"string"},"offsets":{"description":"The list of offsets where the entity was found in the element_path.","items":{"example":"[72, 76]","type":"integer"},"maxItems":2,"minItems":2,"readOnly":true,"type":"array"}},"required":["element_path","offsets"],"title":"Entity Location","type":"object"},"FileAttachment":{"description":"Metadata describing a file attachment.","properties":{"content_type":{"description":"The content type of the file attachment.","readOnly":true,"type":"string"},"created_at":{"description":"The time the file attachment was created.","format":"date-time","readOnly":true,"type":"string"},"created_by_user_id":{"description":"The user ID that created the attachment.","readOnly":true,"type":"string"},"filesize_bytes":{"description":"The size of the attachment measured in bytes.","readOnly":true,"type":"integer"},"id":{"description":"The ID of the file attachment.","readOnly":true,"type":"string"},"name":{"description":"The file name of the attachment.","readOnly":true,"type":"string"}},"title":"File Attachment","type":"object"},"FileAttachments":{"description":"List of file attachments.","properties":{"attachments":{"description":"The list of file attachments.","items":{"$ref":"#/components/schemas/FileAttachment"},"type":"array"}},"title":"File Attachments","type":"object"},"IndicatorAttribution":{"description":"Attributions assodicated with an indicator.","properties":{"id":{"readOnly":true,"type":"string"},"name":{"readOnly":true,"type":"string"},"type":{"readOnly":true,"type":"string"}},"required":["id","name","type"],"title":"Indicator Attribution","type":"object","x-stoplight":{"id":"afpk4k0z11ag1"}},"Label":{"description":"A Label identified within a (raw) document.","properties":{"classifier":{"description":"The classifier that identified this label.","example":"classifier-language","readOnly":true,"type":"string"},"confidence":{"description":"The confidence estimate that the label was identified properly.","example":100,"readOnly":true,"type":"integer"},"element_path":{"description":"The JSON field path in the raw document where the label was identified.","example":"body","readOnly":true,"type":"string"},"id":{"description":"The ID of the label.","example":"ad2fe138-92ea-4642-adc0-53db0e2d4d1b","readOnly":true,"type":"string"},"label":{"description":"The label value.","example":"en","readOnly":true,"type":"string"},"version":{"description":"The version of the classifier that identified this label.","example":"1-0-0","type":"string"}},"required":["id","classifier","version","label","confidence","element_path"],"title":"Label","type":"object"},"Label_match":{"description":"Indication of a label matching a monitor condition for label topics","properties":{"label_id":{"description":"The ID of the identified label that was matched.","type":"string"},"value":{"description":"The label value that was matched.","type":"string"}},"required":["label_id","value"],"title":"Label Match","type":"object"},"Labels":{"description":"A list of labels that have been extracted from a document by our analytics processing.","properties":{"labels":{"description":"The list of labels.","items":{"$ref":"#/components/schemas/Label"},"type":"array"}},"required":["labels"],"title":"Labels","type":"object"},"Location":{"description":"Location represents a text location as specified by its start and end index and its matching value.","properties":{"match_path":{"readOnly":true,"type":"string"},"offsets":{"description":"The offsets in the raw document where the value was identified.","items":{"type":"integer"},"maxItems":2,"minItems":2,"readOnly":true,"type":"array"},"value":{"description":"The value that was identified.","maxLength":1000,"readOnly":true,"type":"string"}},"required":["offsets","value"],"title":"Location","type":"object"},"Monitor":{"description":"A monitor defines 1 or more conditions and an optional doc query string to use for matching documents of interest. Matching a document results in the creation of an alert.","properties":{"created_at":{"description":"The timestamp the monitor was created.","example":"\"2021-08-19T19:48:36Z\"","format":"date-time","readOnly":true,"type":"string"},"created_by_user_email":{"description":"The user's name that created the monitor.","readOnly":true,"type":"string"},"created_by_user_id":{"description":"The ID of the user that created the monitor.","readOnly":true,"type":"string"},"description":{"description":"The description of the monitor.","type":"string"},"doc_condition":{"$ref":"#/components/schemas/Condition"},"email_notify_enabled":{"description":"If email notifications are enabled for this monitor.","type":"boolean"},"email_notify_immediate":{"description":"If immediate email delivery is enabled for this monitor.","type":"boolean"},"enabled":{"description":"If the monitor is enabled or not.","type":"boolean"},"id":{"description":"The ID of the monitor.","example":"c4fbb52bqsiatib6i4gg","readOnly":true,"type":"string"},"last_updated_by_user_id":{"description":"The ID of the user that last updated the monitor.","readOnly":true,"type":"string"},"last_updated_user_email":{"description":"The user's name that last updated the monitor.","readOnly":true,"type":"string"},"name":{"description":"The name of the monitor.","type":"string"},"password_policy":{"$ref":"#/components/schemas/PasswordPolicy"},"template_id":{"description":"If a monitor was created from a template, then this field is populated with the template's ID. It cannot be changed after creation.","readOnly":true,"type":"string"},"updated_at":{"description":"The timestamp the monitor was last updated.","example":"\"2021-08-19T19:48:36Z\"","format":"date-time","readOnly":true,"type":"string"},"version":{"description":"The version number for the monitor. A monitor's version is incremented each time the monitor is updated.","readOnly":true,"type":"integer"}},"required":["doc_condition"],"title":"Monitor","type":"object"},"MonitorBackfillEstimate":{"description":"An estimated count of alerts that will be created when backfilling a monitor.","properties":{"alert_count":{"description":"The estimated number of alerts that will be created when backfilling alerts for the monitor.","readOnly":true,"type":"integer"}},"title":"Monitor Backfill Estimate","type":"object"},"MonitorTemplate":{"description":"Monitor templates provide suggested monitor conditions based on top DTM use cases.","properties":{"description":{"description":"The description of the monitor.","type":"string"},"doc_condition":{"$ref":"#/components/schemas/Condition"},"id":{"description":"The ID of the monitor.","example":"c4fbb52bqsiatib6i4gg","readOnly":true,"type":"string"},"name":{"description":"The name of the monitor.","type":"string"}},"required":["doc_condition"],"title":"Monitor Template","type":"object"},"MonitorTemplates":{"description":"A list of monitor templates for top DTM use cases.","properties":{"templates":{"description":"The list of monitor templates.","items":{"$ref":"#/components/schemas/MonitorTemplate"},"type":"array"}},"title":"Monitor Templates","type":"object"},"Monitors":{"description":"A list of monitor.","properties":{"monitors":{"description":"The list of monitors.","items":{"$ref":"#/components/schemas/Monitor"},"type":"array"}},"title":"Monitors","type":"object"},"PasswordPolicy":{"description":"Criteria defining a password policy.","properties":{"length_max":{"description":"The maxium length of the password in order to meet the policy.","readOnly":false,"type":"integer"},"length_min":{"description":"The minimum length of the password in order to meet the policy.","readOnly":false,"type":"integer"},"lowercase_char_count":{"description":"The minimum numer of lowercase characters a password is expected to have in order to meet the policy.","readOnly":false,"type":"integer"},"lowercase_char_required":{"description":"If true, then the password is expected to have lowercase characters in order to meet the policy.","readOnly":false,"type":"boolean"},"numbers_count":{"description":"The minimum numer of numerical characters a password is expected to have in order to meet the policy.","readOnly":false,"type":"integer"},"numbers_required":{"description":"If true, then the password is expected to have numerical characters in order to meet the policy.","readOnly":false,"type":"boolean"},"special_char_count":{"description":"The minimum numer of special case characters a password is expected to have in order to meet the policy.","readOnly":false,"type":"integer"},"special_char_required":{"description":"If true, then the password is expected to have special case characters in order to meet the policy.","readOnly":false,"type":"boolean"},"uppercase_char_count":{"description":"The minimum numer of uppercase characters a password is expected to have in order to meet the policy.","readOnly":false,"type":"integer"},"uppercase_char_required":{"description":"If true, then the password is expected to have uppercase characters in order to meet the policy.","readOnly":false,"type":"boolean"}},"title":"Password Policy","type":"object"},"Response-message":{"description":"Error response message.","properties":{"message":{"description":"The response message.","type":"string"}},"title":"Error Response","type":"object"},"Topic":{"description":"A topic identified within a (raw) document","properties":{"confidence":{"description":"The estimated confidence that the value was properly idenitified.","example":100,"maximum":100,"readOnly":true,"type":"integer"},"entity_locations":{"description":"The locations of the identified entities.","items":{"$ref":"#/components/schemas/Entity_location"},"readOnly":true,"type":"array"},"extractor":{"description":"The name of the extractor that identified the topic value.","example":"analysis-pipeline.preprocessor","readOnly":true,"type":"string"},"id":{"description":"The ID of the identified topic.","example":"c46bbad1-b542-4d66-9ddb-db84ed16b41f","readOnly":true,"type":"string"},"type":{"description":"The type of the topic.","example":"domain","readOnly":true,"type":"string"},"value":{"description":"The value identified for the topic.","example":"mydomain.com","readOnly":true,"type":"string"},"version":{"description":"The version of the extractor.","example":"1.0.0","readOnly":true,"type":"string"}},"required":["id","value","type","extractor","version","confidence","entity_locations"],"title":"Topic","type":"object"},"Topic_match":{"description":"A topic match indicates which search and topic was matched for a monitor alert.","properties":{"topic_id":{"description":"The ID of the topic corresponding to this match.","example":"1405131d-1d15-4d45-ae42-5535865b3d16","readOnly":true,"type":"string"},"value":{"description":"The value of the topic that matched.","example":"somevalue","readOnly":true,"type":"string"}},"required":["topic_id","value"],"title":"Topic Match","type":"object"},"Topics":{"description":"A list of topics extracted from a document by our analytics processing.","properties":{"topics":{"description":"The list of topics.","items":{"$ref":"#/components/schemas/Topic"},"type":"array"}},"required":["topics"],"title":"Topics","type":"object"},"VerifiedDomain":{"description":"A verified domain proves ownership of domain and is used for authenticating login credential visibility for Compromised Credential alerts.","properties":{"challenge":{"description":"The DNS TXT record challenge code that's used to verified domain ownership.","readOnly":true,"type":"string"},"created_at":{"description":"The time the verified domain was created.","format":"date-time","readOnly":true,"type":"string"},"created_by":{"description":"The user name that created the verified domain.","readOnly":true,"type":"string"},"created_by_user_id":{"description":"The user ID that created the verified domain.","readOnly":true,"type":"string"},"domain":{"description":"The domain name. Must not be a free email provider domain.","readOnly":false,"type":"string"},"id":{"description":"The ID of the verified domain.","example":"c4fbb52bqsiatib6i4gg","readOnly":true,"type":"string"},"primary_domain":{"description":"The primary domain extracted from the domain name. e.g. the parent domain.","readOnly":true,"type":"string"},"status":{"description":"The status of the verified domain with respect to its proven ownership.","enum":["unverified","verified","pending","error"],"readOnly":true,"type":"string"},"updated_at":{"description":"The time the verified domain was last updated.","format":"date-time","readOnly":true,"type":"string"},"updated_by":{"description":"The user name that last updated the verified domain.","readOnly":true,"type":"string"},"updated_by_user_id":{"description":"The user ID that last updated the verified domain.","readOnly":true,"type":"string"},"verification_checked_at":{"description":"The last time the DNS TXT record was checked for verification.","format":"date-time","readOnly":true,"type":"string"},"verification_message":{"description":"A explaination pretaining to the last time the TXT record was checked for the verification code.","readOnly":true,"type":"string"},"verification_type":{"description":"The type of verification used for the domain.","enum":["txt_record","manual"],"readOnly":true,"type":"string"}},"title":"Verifeid Domain","type":"object"},"VerifiedDomainOp":{"description":"A verified domain proves ownership of domain and is used for authenticating login credential visibility for Compromised Credential alerts.","properties":{"domain":{"description":"A verified domain to create.","readOnly":false,"type":"string"}},"title":"Verified Domain Operation","type":"object"},"VerifiedDomainOps":{"description":"A list of verified domains to add.","properties":{"domains":{"description":"The list of verified domains.","items":{"$ref":"#/components/schemas/VerifiedDomainOp"},"type":"array"}},"required":["domains"],"title":"Verified Domain Operations","type":"object"},"VerifiedDomains":{"description":"A list of verified domains.","properties":{"domains":{"description":"The list of verified domains.","items":{"$ref":"#/components/schemas/VerifiedDomain"},"type":"array"}},"required":["domains"],"title":"Verified Domains","type":"object"},"bin":{"title":"bin","type":"string"},"brand":{"title":"brand","type":"string"},"channel":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"channel_id":{"title":"channel_id","type":"string"},"channel_info":{"$ref":"#/components/schemas/channel_info"},"invite_url":{"$ref":"#/components/schemas/url"},"messenger":{"$ref":"#/components/schemas/service"},"name":{"$ref":"#/components/schemas/name"}},"title":"channel","type":"object"},"channel_info":{"properties":{"description":{"title":"description","type":"string"}},"title":"channel_info","type":"object"},"city":{"title":"city","type":"string"},"contact":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"aim":{"title":"aim","type":"string"},"email":{"$ref":"#/components/schemas/email_address"},"email_domain":{"$ref":"#/components/schemas/domain"},"email_redacted":{"title":"email_redacted","type":"string"},"fax":{"$ref":"#/components/schemas/phone_number"},"geo_location":{"$ref":"#/components/schemas/geo_location"},"icq":{"$ref":"#/components/schemas/icq_uin"},"jid":{"$ref":"#/components/schemas/jid"},"msnm":{"title":"msnm","type":"string"},"phone":{"$ref":"#/components/schemas/phone_number"},"twitter_handle":{"$ref":"#/components/schemas/twitter_handle"},"website":{"$ref":"#/components/schemas/url"}},"title":"contact","type":"object"},"content_type":{"title":"content_type","type":"string"},"continent_code":{"title":"continent_code","type":"string"},"country":{"title":"country","type":"string"},"country_code":{"title":"country_code","type":"string"},"country_code_3":{"title":"country_code_3","type":"string"},"cpu":{"properties":{"cores":{"format":"int32","title":"cores","type":"integer"},"product":{"$ref":"#/components/schemas/product"}},"title":"cpu","type":"object"},"data_availability":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"admin_access_available":{"title":"admin_access_available","type":"boolean"},"cvc_available":{"title":"cvc_available","type":"boolean"},"dob_available":{"title":"dob_available","type":"boolean"},"email_available":{"title":"email_available","type":"boolean"},"geo_location_available":{"title":"geo_location_available","type":"boolean"},"mmn_available":{"title":"mmn_available","type":"boolean"},"name_available":{"title":"name_available","type":"boolean"},"phone_available":{"title":"phone_available","type":"boolean"},"pin_available":{"title":"pin_available","type":"boolean"},"pvki_available":{"title":"pvki_available","type":"boolean"},"pvv_available":{"title":"pvv_available","type":"boolean"},"ssn_available":{"title":"ssn_available","type":"boolean"},"track1_available":{"title":"track1_available","type":"boolean"},"track2_available":{"title":"track2_available","type":"boolean"},"vbv_available":{"title":"vbv_available","type":"boolean"}},"title":"data_availability","type":"object"},"dns_rr":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"priority":{"format":"int32","title":"priority","type":"integer"},"rdata_domain":{"$ref":"#/components/schemas/domain"},"rdata_ipv4":{"$ref":"#/components/schemas/ipv4_address"},"type":{"title":"type","type":"string"}},"title":"dns_rr","type":"object"},"domain":{"title":"domain","type":"string"},"domain_discovery":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"domain":{"$ref":"#/components/schemas/domain"},"domain_whois":{"$ref":"#/components/schemas/domain_whois"},"ingested":{"format":"date-time","title":"ingested","type":"string"},"rr":{"items":{"$ref":"#/components/schemas/dns_rr"},"type":"array"},"similar_domains":{"items":{"$ref":"#/components/schemas/domain"},"type":"array"},"source":{"title":"source","type":"string"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"}},"title":"domain_discovery","type":"object"},"domain_whois":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"created":{"format":"date-time","title":"created","type":"string"},"domain":{"$ref":"#/components/schemas/domain"},"expires":{"format":"date-time","title":"expires","type":"string"},"nameservers":{"items":{"$ref":"#/components/schemas/domain"},"type":"array"},"raw_text":{"title":"raw_text","type":"string"},"registrant":{"$ref":"#/components/schemas/profile"},"registrar":{"$ref":"#/components/schemas/profile"},"source":{"title":"source","type":"string"},"statuses":{"items":{"type":"string"},"type":"array"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"},"updated":{"format":"date-time","title":"updated","type":"string"}},"title":"domain_whois","type":"object"},"email_address":{"title":"email_address","type":"string"},"file":{"properties":{"filename":{"$ref":"#/components/schemas/filename"}},"title":"file","type":"object"},"filename":{"title":"filename","type":"string"},"forum_post":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"author":{"$ref":"#/components/schemas/profile"},"board":{"$ref":"#/components/schemas/path"},"body":{"title":"body","type":"string"},"forum":{"$ref":"#/components/schemas/service"},"in_reply_to":{"$ref":"#/components/schemas/message_id"},"ingested":{"format":"date-time","title":"ingested","type":"string"},"message_id":{"$ref":"#/components/schemas/message_id"},"original_id":{"title":"original_id","type":"string"},"post_date":{"format":"date-time","title":"post_date","type":"string"},"source":{"title":"source","type":"string"},"subject":{"title":"subject","type":"string"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"},"topic_id":{"title":"topic_id","type":"string"}},"title":"forum_post","type":"object"},"geo_location":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"bbox":{"$ref":"#/components/schemas/geo_shape"},"city":{"$ref":"#/components/schemas/city"},"continent_code":{"$ref":"#/components/schemas/continent_code"},"country":{"$ref":"#/components/schemas/country"},"country_code":{"$ref":"#/components/schemas/country_code"},"country_code_3":{"$ref":"#/components/schemas/country_code_3"},"location":{"$ref":"#/components/schemas/location_point"},"postal_code":{"$ref":"#/components/schemas/postal_code"},"region":{"$ref":"#/components/schemas/region"},"street_address":{"$ref":"#/components/schemas/street_address"}},"title":"geo_location","type":"object"},"geo_shape":{"properties":{"coordinates":{"items":{"$ref":"#/components/schemas/location_point"},"type":"array"},"type":{"title":"type","type":"string"}},"title":"geo_shape","type":"object"},"hard_disk":{"properties":{"size":{"format":"int64","title":"size","type":"integer"}},"title":"hard_disk","type":"object"},"hashes":{"properties":{"sha256":{"$ref":"#/components/schemas/sha256_hash"}},"title":"hashes","type":"object"},"hashtag":{"title":"hashtag","type":"string"},"host_access":{"properties":{"host_info":{"$ref":"#/components/schemas/host_info"},"service_account":{"$ref":"#/components/schemas/service_account"}},"title":"host_access","type":"object"},"host_info":{"properties":{"av_installed":{"title":"av_installed","type":"boolean"},"cpu":{"$ref":"#/components/schemas/cpu"},"files":{"items":{"$ref":"#/components/schemas/file"},"type":"array"},"geo_location":{"$ref":"#/components/schemas/geo_location"},"hard_disks":{"items":{"$ref":"#/components/schemas/hard_disk"},"type":"array"},"http_cookies":{"items":{"$ref":"#/components/schemas/http_cookie"},"type":"array"},"installed_memory":{"format":"int32","title":"installed_memory","type":"integer"},"installed_software":{"items":{"$ref":"#/components/schemas/product"},"type":"array"},"network_info":{"$ref":"#/components/schemas/network_info"},"number_user_accounts":{"format":"int32","title":"number_user_accounts","type":"integer"},"operating_system":{"$ref":"#/components/schemas/product"},"ransomware_installed":{"title":"ransomware_installed","type":"boolean"},"service_accounts":{"items":{"$ref":"#/components/schemas/service_account"},"type":"array"},"sites_visited":{"items":{"$ref":"#/components/schemas/inet_location"},"type":"array"},"tags":{"items":{"$ref":"#/components/schemas/tag"},"type":"array"},"uptime":{"format":"int64","title":"uptime","type":"integer"},"virtualization":{"$ref":"#/components/schemas/product"}},"title":"host_info","type":"object"},"http_cookie":{"properties":{"domain":{"$ref":"#/components/schemas/domain"}},"title":"http_cookie","type":"object"},"icq_uin":{"title":"icq_uin","type":"string"},"identity":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"dob":{"format":"date-time","title":"dob","type":"string"},"dob_format":{"title":"dob_format","type":"string"},"first_name":{"$ref":"#/components/schemas/identity_name"},"last_name":{"$ref":"#/components/schemas/identity_name"},"mmn":{"title":"mmn","type":"string"},"name":{"$ref":"#/components/schemas/identity_name"},"ssn":{"title":"ssn","type":"string"}},"title":"identity","type":"object"},"identity_name":{"title":"identity_name","type":"string"},"inet_location":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"domain":{"$ref":"#/components/schemas/domain"},"ips_v4":{"items":{"$ref":"#/components/schemas/ipv4_address"},"type":"array"},"ips_v6":{"items":{"$ref":"#/components/schemas/ipv6_address"},"type":"array"},"path":{"$ref":"#/components/schemas/path"},"port":{"$ref":"#/components/schemas/inet_port"},"protocol":{"$ref":"#/components/schemas/network_protocol"},"url":{"$ref":"#/components/schemas/url"}},"title":"inet_location","type":"object"},"inet_port":{"format":"int32","title":"inet_port","type":"integer"},"ipv4_address":{"format":"ip","title":"ipv4_address","type":"string"},"ipv6_address":{"format":"ip","title":"ipv6_address","type":"string"},"jid":{"title":"jid","type":"string"},"language":{"title":"language","type":"string"},"location_point":{"title":"location_point","type":"string"},"message":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"body":{"title":"body","type":"string"},"channel":{"$ref":"#/components/schemas/channel"},"edit_of":{"$ref":"#/components/schemas/message_id"},"in_reply_to":{"$ref":"#/components/schemas/message_id"},"ingested":{"format":"date-time","title":"ingested","type":"string"},"message_id":{"$ref":"#/components/schemas/message_id"},"messenger":{"$ref":"#/components/schemas/service"},"original_id":{"title":"original_id","type":"string"},"parts":{"items":{"$ref":"#/components/schemas/mime_part"},"type":"array"},"sender":{"$ref":"#/components/schemas/profile"},"source":{"title":"source","type":"string"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"}},"title":"message","type":"object"},"message_id":{"title":"message_id","type":"string"},"mime_part":{"properties":{"body":{"title":"body","type":"string"},"content_type":{"$ref":"#/components/schemas/content_type"},"filename":{"$ref":"#/components/schemas/filename"},"hashes":{"$ref":"#/components/schemas/hashes"}},"title":"mime_part","type":"object"},"name":{"title":"name","type":"string"},"nested_tweet":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"author":{"$ref":"#/components/schemas/profile"},"body":{"title":"body","type":"string"},"display_text_range":{"items":{"format":"int32","type":"integer"},"type":"array"},"geo_location":{"$ref":"#/components/schemas/geo_location"},"id_str":{"$ref":"#/components/schemas/message_id"},"in_reply_to":{"$ref":"#/components/schemas/message_id"},"is_quote":{"title":"is_quote","type":"boolean"},"language":{"$ref":"#/components/schemas/language"},"place":{"$ref":"#/components/schemas/geo_location"},"possibly_sensitive":{"title":"possibly_sensitive","type":"boolean"},"quote_count":{"format":"int32","title":"quote_count","type":"integer"},"quotes":{"$ref":"#/components/schemas/message_id"},"recipient":{"$ref":"#/components/schemas/profile"},"reply_count":{"format":"int32","title":"reply_count","type":"integer"},"retweet_count":{"format":"int32","title":"retweet_count","type":"integer"},"source":{"title":"source","type":"string"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"},"tweet_hashtags":{"items":{"$ref":"#/components/schemas/twitter_entity_hashtag"},"type":"array"},"tweet_media":{"items":{"$ref":"#/components/schemas/twitter_entity_media"},"type":"array"},"tweet_symbols":{"items":{"$ref":"#/components/schemas/twitter_entity_symbol"},"type":"array"},"tweet_urls":{"items":{"$ref":"#/components/schemas/twitter_entity_url"},"type":"array"},"tweet_user_mentions":{"items":{"$ref":"#/components/schemas/twitter_entity_mention"},"type":"array"}},"title":"nested_tweet","type":"object"},"network_info":{"properties":{"ad_domain":{"$ref":"#/components/schemas/domain"},"blacklisted_by":{"items":{"$ref":"#/components/schemas/organization"},"type":"array"},"domain":{"$ref":"#/components/schemas/domain"},"download_bw":{"format":"float","title":"download_bw","type":"number"},"host_name":{"title":"host_name","type":"string"},"ipv4":{"$ref":"#/components/schemas/ipv4_address"},"is_proxy":{"title":"is_proxy","type":"boolean"},"isp":{"$ref":"#/components/schemas/organization"},"partial_ipv4":{"$ref":"#/components/schemas/ipv4_address"},"upload_bw":{"format":"float","title":"upload_bw","type":"number"}},"title":"network_info","type":"object"},"network_protocol":{"title":"network_protocol","type":"string"},"organization":{"title":"organization","type":"string"},"password":{"properties":{"encrypted_text":{"title":"encrypted_text","type":"string"},"encryption_algorithm":{"title":"encryption_algorithm","type":"string"},"plain_text":{"$ref":"#/components/schemas/password_plaintext"}},"title":"password","type":"object"},"password_plaintext":{"title":"password_plaintext","type":"string"},"paste":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"author":{"$ref":"#/components/schemas/profile"},"body":{"title":"body","type":"string"},"collection_ts":{"format":"date-time","title":"collection_ts","type":"string"},"ingested":{"format":"date-time","title":"ingested","type":"string"},"paste_id":{"title":"paste_id","type":"string"},"service":{"$ref":"#/components/schemas/service"},"source":{"title":"source","type":"string"},"source_location":{"$ref":"#/components/schemas/inet_location"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"},"title":{"title":"title","type":"string"}},"title":"paste","type":"object"},"path":{"title":"path","type":"string"},"payment_card":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"brand":{"$ref":"#/components/schemas/brand"},"expiry_date":{"format":"date-time","title":"expiry_date","type":"string"},"issuer":{"$ref":"#/components/schemas/organization"},"owner":{"$ref":"#/components/schemas/profile"},"partial_number_prefix":{"$ref":"#/components/schemas/bin"},"partial_number_suffix":{"title":"partial_number_suffix","type":"string"},"product":{"$ref":"#/components/schemas/product"},"service_code":{"title":"service_code","type":"string"},"type":{"title":"type","type":"string"},"vbv":{"title":"vbv","type":"string"}},"title":"payment_card","type":"object"},"phone_number":{"title":"phone_number","type":"string"},"postal_code":{"title":"postal_code","type":"string"},"product":{"title":"product","type":"string"},"product_batch":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"description":{"title":"description","type":"string"},"name":{"$ref":"#/components/schemas/product_batch_name"},"release_date":{"format":"date-time","title":"release_date","type":"string"}},"title":"product_batch","type":"object"},"product_batch_name":{"title":"product_batch_name","type":"string"},"profile":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"contact":{"$ref":"#/components/schemas/contact"},"created":{"format":"date-time","title":"created","type":"string"},"identity":{"$ref":"#/components/schemas/identity"},"language":{"$ref":"#/components/schemas/language"},"telegram":{"$ref":"#/components/schemas/telegram_profile"},"twitter":{"$ref":"#/components/schemas/twitter_profile"}},"title":"profile","type":"object"},"region":{"title":"region","type":"string"},"security_question":{"properties":{"answer":{"title":"answer","type":"string"},"question":{"title":"question","type":"string"}},"title":"security_question","type":"object"},"service":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"description":{"title":"description","type":"string"},"geo_location":{"$ref":"#/components/schemas/geo_location"},"id":{"title":"id","type":"string"},"inet_location":{"$ref":"#/components/schemas/inet_location"},"name":{"$ref":"#/components/schemas/service_name"},"software":{"$ref":"#/components/schemas/product"}},"title":"service","type":"object"},"service_account":{"properties":{"created_at":{"format":"date-time","title":"created_at","type":"string"},"login":{"title":"login","type":"string"},"original_id":{"title":"original_id","type":"string"},"password":{"$ref":"#/components/schemas/password"},"profile":{"$ref":"#/components/schemas/profile"},"security_questions":{"items":{"$ref":"#/components/schemas/security_question"},"type":"array"},"service":{"$ref":"#/components/schemas/service"},"service_account_info":{"$ref":"#/components/schemas/service_account_info"}},"title":"service_account","type":"object"},"service_account_info":{"properties":{"balance":{"format":"float","title":"balance","type":"number"},"currency":{"title":"currency","type":"string"},"last_transaction_ts":{"format":"date-time","title":"last_transaction_ts","type":"string"},"linked_payment_method_description":{"title":"linked_payment_method_description","type":"string"},"points":{"format":"int32","title":"points","type":"integer"}},"title":"service_account_info","type":"object"},"service_name":{"title":"service_name","type":"string"},"sha256_hash":{"title":"sha256_hash","type":"string"},"shop_listing":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"batch":{"$ref":"#/components/schemas/product_batch"},"currency":{"title":"currency","type":"string"},"data_availability":{"$ref":"#/components/schemas/data_availability"},"description":{"title":"description","type":"string"},"host_access":{"$ref":"#/components/schemas/host_access"},"host_info":{"$ref":"#/components/schemas/host_info"},"ingested":{"format":"date-time","title":"ingested","type":"string"},"is_verified":{"title":"is_verified","type":"boolean"},"item_qty":{"format":"int32","title":"item_qty","type":"integer"},"item_sold":{"format":"int32","title":"item_sold","type":"integer"},"item_type":{"title":"item_type","type":"string"},"listing_id":{"title":"listing_id","type":"string"},"listing_url":{"$ref":"#/components/schemas/inet_location"},"payment_card":{"$ref":"#/components/schemas/payment_card"},"price":{"format":"float","title":"price","type":"number"},"profile":{"$ref":"#/components/schemas/profile"},"publish_ts":{"format":"date-time","title":"publish_ts","type":"string"},"seller":{"$ref":"#/components/schemas/profile"},"service_account":{"$ref":"#/components/schemas/service_account"},"shop":{"$ref":"#/components/schemas/service"},"source":{"title":"source","type":"string"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"},"title":{"title":"title","type":"string"},"verification_ts":{"format":"date-time","title":"verification_ts","type":"string"}},"title":"shop_listing","type":"object"},"street":{"title":"street","type":"string"},"street_address":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"number":{"format":"int32","title":"number","type":"integer"},"street":{"$ref":"#/components/schemas/street"}},"title":"street_address","type":"object"},"tag":{"properties":{"location_point":{"$ref":"#/components/schemas/location_point"},"name":{"$ref":"#/components/schemas/name"},"value":{"title":"value","type":"string"}},"title":"tag","type":"object"},"telegram_profile":{"properties":{"name":{"$ref":"#/components/schemas/telegram_user_name"},"user_id":{"format":"int64","title":"user_id","type":"integer"}},"title":"telegram_profile","type":"object"},"telegram_user_name":{"title":"telegram_user_name","type":"string"},"tweet":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"author":{"$ref":"#/components/schemas/profile"},"body":{"title":"body","type":"string"},"display_text_range":{"items":{"format":"int32","type":"integer"},"type":"array"},"geo_location":{"$ref":"#/components/schemas/geo_location"},"id_str":{"$ref":"#/components/schemas/message_id"},"in_reply_to":{"$ref":"#/components/schemas/message_id"},"ingested":{"format":"date-time","title":"ingested","type":"string"},"is_quote":{"title":"is_quote","type":"boolean"},"language":{"$ref":"#/components/schemas/language"},"place":{"$ref":"#/components/schemas/geo_location"},"possibly_sensitive":{"title":"possibly_sensitive","type":"boolean"},"quote_count":{"format":"int32","title":"quote_count","type":"integer"},"quoted_status":{"$ref":"#/components/schemas/nested_tweet"},"quotes":{"$ref":"#/components/schemas/message_id"},"recipient":{"$ref":"#/components/schemas/profile"},"reply_count":{"format":"int32","title":"reply_count","type":"integer"},"retweet_count":{"format":"int32","title":"retweet_count","type":"integer"},"retweeted":{"$ref":"#/components/schemas/message_id"},"retweeted_status":{"$ref":"#/components/schemas/nested_tweet"},"source":{"title":"source","type":"string"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"},"tweet_hashtags":{"items":{"$ref":"#/components/schemas/twitter_entity_hashtag"},"type":"array"},"tweet_media":{"items":{"$ref":"#/components/schemas/twitter_entity_media"},"type":"array"},"tweet_symbols":{"items":{"$ref":"#/components/schemas/twitter_entity_symbol"},"type":"array"},"tweet_urls":{"items":{"$ref":"#/components/schemas/twitter_entity_url"},"type":"array"},"tweet_user_mentions":{"items":{"$ref":"#/components/schemas/twitter_entity_mention"},"type":"array"}},"title":"tweet","type":"object"},"twitter_entity_hashtag":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"hashtag":{"$ref":"#/components/schemas/hashtag"},"indices":{"items":{"format":"int32","type":"integer"},"type":"array"}},"title":"twitter_entity_hashtag","type":"object"},"twitter_entity_media":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"display_location":{"$ref":"#/components/schemas/inet_location"},"expanded_location":{"$ref":"#/components/schemas/inet_location"},"indices":{"items":{"format":"int32","type":"integer"},"type":"array"},"inet_location":{"$ref":"#/components/schemas/inet_location"},"media_id_str":{"title":"media_id_str","type":"string"},"media_location":{"$ref":"#/components/schemas/inet_location"},"media_type":{"title":"media_type","type":"string"},"source_status_id_str":{"$ref":"#/components/schemas/message_id"}},"title":"twitter_entity_media","type":"object"},"twitter_entity_mention":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"indices":{"items":{"format":"int32","type":"integer"},"type":"array"},"mentioned_user":{"$ref":"#/components/schemas/profile"}},"title":"twitter_entity_mention","type":"object"},"twitter_entity_symbol":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"indices":{"items":{"format":"int32","type":"integer"},"type":"array"},"text":{"title":"text","type":"string"}},"title":"twitter_entity_symbol","type":"object"},"twitter_entity_url":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"display_location":{"$ref":"#/components/schemas/inet_location"},"expanded_location":{"$ref":"#/components/schemas/inet_location"},"indices":{"items":{"format":"int32","type":"integer"},"type":"array"},"inet_location":{"$ref":"#/components/schemas/inet_location"}},"title":"twitter_entity_url","type":"object"},"twitter_handle":{"title":"twitter_handle","type":"string"},"twitter_profile":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"description":{"title":"description","type":"string"},"followers_count":{"format":"int32","title":"followers_count","type":"integer"},"id_str":{"title":"id_str","type":"string"},"profile_background_location":{"$ref":"#/components/schemas/inet_location"},"profile_banner_location":{"$ref":"#/components/schemas/inet_location"},"profile_image_location":{"$ref":"#/components/schemas/inet_location"},"protected":{"title":"protected","type":"boolean"},"statuses_count":{"format":"int32","title":"statuses_count","type":"integer"},"user_location":{"title":"user_location","type":"string"},"verified":{"title":"verified","type":"boolean"}},"title":"twitter_profile","type":"object"},"url":{"title":"url","type":"string"},"web_content_publish":{"properties":{"__id":{"title":"__id","type":"string"},"__type":{"title":"__type","type":"string"},"author":{"$ref":"#/components/schemas/profile"},"collection_ts":{"format":"date-time","title":"collection_ts","type":"string"},"inet_location":{"$ref":"#/components/schemas/inet_location"},"ingested":{"format":"date-time","title":"ingested","type":"string"},"language":{"$ref":"#/components/schemas/language"},"links":{"items":{"$ref":"#/components/schemas/inet_location"},"type":"array"},"raw_text":{"title":"raw_text","type":"string"},"source":{"title":"source","type":"string"},"text":{"title":"text","type":"string"},"timestamp":{"format":"date-time","title":"timestamp","type":"string"},"title":{"title":"title","type":"string"}},"title":"web_content_publish","type":"object"}},"securitySchemes":{"sec0":{"in":"query","name":"x-apikey","type":"apiKey"}}},"info":{"contact":{},"description":"The Digital Threat Monitoring (DTM) API provides programatic access to Mandiant's DTM capabilities.","title":"DTM (DIGITAL THREAT MONITORING)","version":"1.0"},"openapi":"3.1.0","paths":{"/alerts":{"get":{"description":"","operationId":"get-alerts","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The alert field name to sort the response alerts by.","in":"query","name":"sort","schema":{"default":"created_at","enum":["id","created_at","updated_at","monitor_id"],"example":"updated_at","type":"string"}},{"description":"The order used to sort the response alerts field by.","in":"query","name":"order","schema":{"default":"desc","enum":["asc","desc"],"example":"asc","type":"string"}},{"description":"The number of alerts to return in each page. Max value of 25.","in":"query","name":"size","schema":{"default":10,"example":20,"type":"integer","maximum":25,"minimum":0}},{"description":"Only return alerts for the given monitor ID. This parameter can be specified multiple times to filter on more than one monitor ID.","in":"query","name":"monitor_id","schema":{"example":"c4fcpm2bqsiatib6i4h0","type":"string"}},{"description":"If false, doc, labels, and topics are not returned in the response body.","in":"query","name":"refs","schema":{"default":true,"type":"boolean"}},{"description":"If true, then any links in the alert doc are sanitized and replaced.","in":"query","name":"replace_links","schema":{"default":false,"type":"boolean"}},{"description":"If true, then the monitor's name that created the alert is returned in the alert response body.","in":"query","name":"monitor_name","schema":{"default":false,"type":"boolean"}},{"description":"If true, then only alerts that have analysis are returned. An alert has anlysis if it has either analysis text or analysis file attachments.","in":"query","name":"has_analysis","schema":{"type":"boolean"}},{"description":"If true, then alert buckets are returned for aggregated alerts. If false, then bucket format is not returned, but instead all child aggregated alerts are.","in":"query","name":"buckets","schema":{"default":false,"type":"boolean"}},{"description":"When listing alerts by date range, since defines the starting date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"When listing alerts by date range, until defines the ending date in RFC3339 format","in":"query","name":"until","schema":{"format":"date-time","type":"string"}},{"description":"Only used when fetching subsequent pages during pagination and will contain a unique page ID. No other query parameters can be used with page","in":"query","name":"page","schema":{"type":"string"}},{"description":"Truncates document fields to the given length using unicode ellipsis (\\x2026) to indicate truncation","in":"query","name":"truncate","schema":{"type":"integer"}},{"description":"Filter alerts by their status. This parameter can be specified multiple times.","in":"query","name":"status","schema":{"enum":["new","read","escalated","in_progress","closed","no_action_required","duplicate","not_relevant","tracked_external"],"type":"string"}},{"description":"Filter alerts by alert type. This parameter can be specified multiple times.","in":"query","name":"alert_type","schema":{"enum":["Compromised Credentials","Domain Discovery","Forum Post","Message","Paste","Shop Listing","Tweet","Web Content"],"type":"string"}},{"description":"Search alert and triggering doc contents based on a simple Lucene query string including 1 or more text values separated by AND or OR.","in":"query","name":"search","schema":{"type":"string"}},{"description":"If specified, then only alerts that have the given match value are returned. This parameter can be repeated multiple times.","in":"query","name":"match_value","schema":{"type":"string"}},{"description":"Filter alerts by tag(s). This parameter can be used more than once to filter on multiple tags.","in":"query","name":"tags","schema":{"type":"string"}},{"description":"When using the search parameter, its value can be base64 encoded in which case search_encoding indicates the value encoding type.","in":"query","name":"search_encoding","schema":{"enum":["base64"],"type":"string"}},{"description":"Return alerts that have the given severity. This parameter can be repeated multiple times.","in":"query","name":"severity","schema":{"enum":["high","medium","low"],"type":"string"}},{"description":"If true, any HTML content in the alert is sanitized to ensure it does not potentially contain malicious tags. If not used, be careful when rendering/using the alert/doc content. This param can also be specified as a json path in the alert document to sanitize and may be repeated in this case.","in":"query","name":"sanitize","schema":{"type":"string"}},{"description":"Filter alerts with mscores greater than or equal to the given value.","in":"query","name":"mscore_gte","schema":{"maximum":100,"minimum":0,"type":"integer"}}],"responses":{"200":{"content":{"application/json":{"examples":{"list-alerts":{"value":{"alerts":[{"alert_summary":"See alert content for details","alert_type":"Domain Discovery","analysis":"Sample analysis text.","attachments":[{"content_type":"image/png","created_at":"2024-02-02T14:24:15.841001769Z","created_by_user_id":"b732d502-f8d3-103a-8371-ddaa058454c8","filesize_bytes":4262,"id":"cmufm3qec7l1h694o100","name":"Screenshot 2024-01-31 3.06.56 PM.png"}],"confidence":0.5,"created_at":"2024-01-16T20:11:42.468Z","doc":{"__id":"d35713ca-707d-436d-84a5-220e3ae75b61","__type":"domain_discovery","domain":"mwise.mandiant.com","ingested":"2024-01-16T20:10:03Z","rr":[{"rdata_domain":"elb-2975-mwise-mandiant-com.swoogo.com","type":"CNAME"}],"source":"ctl-certstream","timestamp":"2024-01-16T20:02:00Z"},"doc_matches":[],"doc_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61","email_sent_at":"","has_analysis":false,"id":"cmje5vmbenj434u3nnvg","label_matches":[],"labels_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61/labels","monitor_id":"clb20lirrtn3gnjncs40","monitor_version":1,"severity":"medium","status":"escalated","tags":[],"title":"Suspicious domain \"mwise.mandiant.com\" similar to \"mandiant.com\"","topic_matches":[{"offsets":[6,18],"term":"mandiant.com","topic_id":"95eed43c-8f51-49ce-a1d8-f88b5441cec3","value":"mwise.mandiant.com"},{"topic_id":"doc_type:domain_discovery","value":"domain_discovery"}],"topics":[{"entity_locations":[{"element_path":"domain","offsets":[0,18]}],"extractor":"dtm-ma","extractor_version":"0.1.302","id":"95eed43c-8f51-49ce-a1d8-f88b5441cec3","type":"domain","value":"mwise.mandiant.com"},{"entity_locations":[{"element_path":"rr[0].rdata_domain","offsets":[0,38]}],"extractor":"dtm-ma","extractor_version":"0.1.302","id":"6c2cbf1b-4116-4533-80d0-1bf6b0dcf7bb","type":"domain","value":"elb-2975-mwise-mandiant-com.swoogo.com"}],"topics_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61/topics","updated_at":"2024-01-20T11:17:36.261Z"}]}}},"schema":{"$ref":"#/components/schemas/Alerts"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"default":"application/json","example":"application/json","type":"string"}},"Link":{"description":"If another page of results is available for pagination, the Link header will contain the URI used to fetch the next page.","schema":{"example":"<https://api.intelligence.mandiant.com/v4/dtm/alerts?page=c52e5bc1hrv40t8d0gvg>; rel=\"next\"","type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List alerts","tags":["DTM Alerts"]}},"/alerts/{id}":{"get":{"description":"","operationId":"get-alerts-id","parameters":[{"description":"The ID of the alert.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"Truncates document fields to the given length using unicode ellipsis (\\x2026) to indicate truncation","in":"query","name":"truncate","schema":{"type":"integer"}},{"description":"If true, the alert response will include its triggering doc, topics, and labels in the response JSON.","in":"query","name":"refs","schema":{"type":"boolean"}},{"description":"If true, any HTML content in the alert is sanitized to ensure it does not potentially contain malicious tags. If not used, be careful when rendering/using the alert/doc content. This param can also be specified as a json path in the document to sanitize and may be repeated in this case.","in":"query","name":"sanitize","schema":{"type":"boolean"}}],"responses":{"200":{"content":{"application/json":{"examples":{"get-alert":{"value":{"alert_summary":"See alert content for details","alert_type":"Domain Discovery","analysis":"Sample analysis text.","attachments":[{"content_type":"image/png","created_at":"2024-02-02T14:24:15.841001769Z","created_by_user_id":"b732d502-f8d3-103a-8371-ddaa058454c8","filesize_bytes":4262,"id":"cmufm3qec7l1h694o100","name":"Screenshot 2024-01-31 3.06.56 PM.png"}],"confidence":0.5,"created_at":"2024-01-16T20:11:42.468Z","doc":{"__id":"d35713ca-707d-436d-84a5-220e3ae75b61","__type":"domain_discovery","domain":"mwise.mandiant.com","ingested":"2024-01-16T20:10:03Z","rr":[{"rdata_domain":"elb-2975-mwise-mandiant-com.swoogo.com","type":"CNAME"}],"source":"ctl-certstream","timestamp":"2024-01-16T20:02:00Z"},"doc_matches":[],"doc_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61","email_sent_at":"","has_analysis":false,"id":"cmje5vmbenj434u3nnvg","label_matches":[],"labels_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61/labels","lastAnalysisUpdate":{"date":"February 02, 2024 09:24 AM","user":"Mandiant User"},"monitor_id":"clb20lirrtn3gnjncs40","monitor_version":1,"severity":"medium","status":"escalated","tags":[],"title":"Suspicious domain \"mwise.mandiant.com\" similar to \"mandiant.com\"","topic_matches":[{"offsets":[6,18],"term":"mandiant.com","topic_id":"95eed43c-8f51-49ce-a1d8-f88b5441cec3","value":"mwise.mandiant.com"},{"topic_id":"doc_type:domain_discovery","value":"domain_discovery"}],"topics":[{"entity_locations":[{"element_path":"domain","offsets":[0,18]}],"extractor":"dtm-ma","extractor_version":"0.1.302","id":"95eed43c-8f51-49ce-a1d8-f88b5441cec3","type":"domain","value":"mwise.mandiant.com"},{"entity_locations":[{"element_path":"rr[0].rdata_domain","offsets":[0,38]}],"extractor":"dtm-ma","extractor_version":"0.1.302","id":"6c2cbf1b-4116-4533-80d0-1bf6b0dcf7bb","type":"domain","value":"elb-2975-mwise-mandiant-com.swoogo.com"}],"topics_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61/topics","updated_at":"2024-01-20T11:17:36.261Z"}}},"schema":{"$ref":"#/components/schemas/Alert"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"default":"application/json","example":"application/json","type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Get an existing alert by its ID","tags":["DTM Alerts"]},"patch":{"description":"","operationId":"patch-alerts-id","parameters":[{"description":"The ID of the alert.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The accept type for the response body.","in":"header","name":"Accept","required":true,"schema":{"type":"string"}},{"description":"The content type of the request body.","in":"header","name":"Content-Type","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"examples":{"add-tags":{"value":{"tags":["tag1","tag2"]}},"patch-status-read":{"value":{"status":"read"}}},"schema":{"properties":{"status":{"enum":["new","read","closed","escalated","in_progress","no_action_required","duplicate","not_relevant","tracked_external"],"type":"string"},"tags":{"items":{"type":"string"},"type":"array"}},"type":"object"}}},"description":"Update one or more writable fields of an alert."},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Alert"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Update field(s) of an alert","tags":["DTM Alerts"]}},"/alerts/{id}/aggregates":{"get":{"description":"","operationId":"get-agg-child-alerts","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The ID of the alert bucket to list child aggregate alerts for.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"The alert field name to sort the response alerts by.","in":"query","name":"sort","schema":{"default":"created_at","enum":["id","created_at","updated_at","monitor_id"],"example":"updated_at","type":"string"}},{"description":"The order used to sort the response alerts field by.","in":"query","name":"order","schema":{"default":"desc","enum":["asc","desc"],"example":"asc","type":"string"}},{"description":"The number of alerts to return in each page. Max value of 25.","in":"query","name":"size","schema":{"default":10,"example":20,"type":"integer","maximum":25,"minimum":0}},{"description":"Only return alerts for the given monitor ID. This parameter can be specified multiple times to filter on more than one monitor ID.","in":"query","name":"monitor_id","schema":{"example":"c4fcpm2bqsiatib6i4h0","type":"string"}},{"description":"If false, doc, labels, and topics are not returned in the response body.","in":"query","name":"refs","schema":{"default":true,"type":"boolean"}},{"description":"If true, then any links in the alert doc are sanitized and replaced.","in":"query","name":"replace_links","schema":{"default":false,"type":"boolean"}},{"description":"If true, then the monitor's name that created the alert is returned in the alert response body.","in":"query","name":"monitor_name","schema":{"default":false,"type":"boolean"}},{"description":"If true, then only alerts that have analysis are returned. An alert has anlysis if it has either analysis text or analysis file attachments.","in":"query","name":"has_analysis","schema":{"type":"boolean"}},{"description":"If true, then alert buckets are returned for aggregated alerts. If false, then bucket format is not returned, but instead all child aggregated alerts are.","in":"query","name":"buckets","schema":{"default":false,"type":"boolean"}},{"description":"When listing alerts by date range, since defines the starting date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"When listing alerts by date range, until defines the ending date in RFC3339 format","in":"query","name":"until","schema":{"format":"date-time","type":"string"}},{"description":"Only used when fetching subsequent pages during pagination and will contain a unique page ID. No other query parameters can be used with page","in":"query","name":"page","schema":{"type":"string"}},{"description":"Truncates document fields to the given length using unicode ellipsis (\\x2026) to indicate truncation","in":"query","name":"truncate","schema":{"type":"integer"}},{"description":"Filter alerts by their status. This parameter can be specified multiple times.","in":"query","name":"status","schema":{"enum":["new","read","escalated","in_progress","closed","no_action_required","duplicate","not_relevant","tracked_external"],"type":"string"}},{"description":"Filter alerts by alert type. This parameter can be specified multiple times.","in":"query","name":"alert_type","schema":{"enum":["Compromised Credentials","Domain Discovery","Forum Post","Message","Paste","Shop Listing","Tweet","Web Content"],"type":"string"}},{"description":"Search alert and triggering doc contents based on a simple Lucene query string including 1 or more text values separated by AND or OR.","in":"query","name":"search","schema":{"type":"string"}},{"description":"If specified, then only alerts that have the given match value are returned. This parameter can be repeated multiple times.","in":"query","name":"match_value","schema":{"type":"string"}},{"description":"Filter alerts by tag(s). This parameter can be used more than once to filter on multiple tags.","in":"query","name":"tags","schema":{"type":"string"}},{"description":"When using the search parameter, its value can be base64 encoded in which case search_encoding indicates the value encoding type.","in":"query","name":"search_encoding","schema":{"enum":["base64"],"type":"string"}},{"description":"Return alerts that have the given severity. This parameter can be repeated multiple times.","in":"query","name":"severity","schema":{"enum":["high","medium","low"],"type":"string"}},{"description":"If true, any HTML content in the alert is sanitized to ensure it does not potentially contain malicious tags. If not used, be careful when rendering/using the alert/doc content. This param can also be specified as a json path in the alert document to sanitize and may be repeated in this case.","in":"query","name":"sanitize","schema":{"type":"string"}},{"description":"Filter alerts with mscores greater than or equal to the given value.","in":"query","name":"mscore_gte","schema":{"maximum":100,"minimum":0,"type":"integer"}}],"responses":{"200":{"content":{"application/json":{"examples":{"list-alerts":{"value":{"alerts":[{"alert_summary":"See alert content for details","alert_type":"Domain Discovery","analysis":"Sample analysis text.","attachments":[{"content_type":"image/png","created_at":"2024-02-02T14:24:15.841001769Z","created_by_user_id":"b732d502-f8d3-103a-8371-ddaa058454c8","filesize_bytes":4262,"id":"cmufm3qec7l1h694o100","name":"Screenshot 2024-01-31 3.06.56 PM.png"}],"confidence":0.5,"created_at":"2024-01-16T20:11:42.468Z","doc":{"__id":"d35713ca-707d-436d-84a5-220e3ae75b61","__type":"domain_discovery","domain":"mwise.mandiant.com","ingested":"2024-01-16T20:10:03Z","rr":[{"rdata_domain":"elb-2975-mwise-mandiant-com.swoogo.com","type":"CNAME"}],"source":"ctl-certstream","timestamp":"2024-01-16T20:02:00Z"},"doc_matches":[],"doc_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61","email_sent_at":"","has_analysis":false,"id":"cmje5vmbenj434u3nnvg","label_matches":[],"labels_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61/labels","monitor_id":"clb20lirrtn3gnjncs40","monitor_version":1,"severity":"medium","status":"escalated","tags":[],"title":"Suspicious domain \"mwise.mandiant.com\" similar to \"mandiant.com\"","topic_matches":[{"offsets":[6,18],"term":"mandiant.com","topic_id":"95eed43c-8f51-49ce-a1d8-f88b5441cec3","value":"mwise.mandiant.com"},{"topic_id":"doc_type:domain_discovery","value":"domain_discovery"}],"topics":[{"entity_locations":[{"element_path":"domain","offsets":[0,18]}],"extractor":"dtm-ma","extractor_version":"0.1.302","id":"95eed43c-8f51-49ce-a1d8-f88b5441cec3","type":"domain","value":"mwise.mandiant.com"},{"entity_locations":[{"element_path":"rr[0].rdata_domain","offsets":[0,38]}],"extractor":"dtm-ma","extractor_version":"0.1.302","id":"6c2cbf1b-4116-4533-80d0-1bf6b0dcf7bb","type":"domain","value":"elb-2975-mwise-mandiant-com.swoogo.com"}],"topics_url":"https://api.intelligence.mandiant.com/v4/dtm/docs/domain_discovery/d35713ca-707d-436d-84a5-220e3ae75b61/topics","updated_at":"2024-01-20T11:17:36.261Z"}]}}},"schema":{"$ref":"#/components/schemas/Alerts"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"default":"application/json","example":"application/json","type":"string"}},"Link":{"description":"If another page of results is available for pagination, the Link header will contain the URI used to fetch the next page.","schema":{"example":"<https://api.intelligence.mandiant.com/v4/dtm/alerts?page=c52e5bc1hrv40t8d0gvg>; rel=\"next\"","type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List child alerts for a given aggregated alert bucket","tags":["DTM Alerts"]}},"/alerts/{id}/analysis":{"put":{"description":"","operationId":"put-alert-analysis","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The content type of the body.","in":"header","name":"Content-Type","required":true,"schema":{"enum":["application/json"],"type":"string"}},{"description":"The ID of the alert to update the analysis on.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/AlertAnalysisOp"}}}},"responses":{"200":{"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"403":{"content":{"application/json":{"examples":{"forbidden":{"value":{"message":"forbidden"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Forbidden","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}}},"summary":"Update the analysis text on an alert","tags":["Alert Analysis"]}},"/alerts/{id}/attachments":{"get":{"description":"","operationId":"get-alert-analysis-attachments","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The content type.","in":"header","name":"Content-Type","required":true,"schema":{"enum":["application/json"],"type":"string"}},{"description":"The ID of the alert to list attachments for.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/FileAttachments"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"default":"application/json","example":"application/json","type":"string"}}}},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"403":{"content":{"application/json":{"examples":{"forbidden":{"value":{"message":"forbidden"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Forbidden","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}}},"summary":"List the file attachments for the alert","tags":["Alert Analysis"]},"post":{"description":"","operationId":"post-alert-analysis-attachment","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"Multipart form data is used to upload one or more files to an alert analysis.","in":"header","name":"Content-Type","required":true,"schema":{"enum":["multipart/form-data"],"type":"string"}},{"description":"The ID of the alert to add the attachment to.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}}],"responses":{"200":{"description":"OK"},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"403":{"content":{"application/json":{"examples":{"forbidden":{"value":{"message":"forbidden"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Forbidden","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}}},"summary":"Upload attachments to an alert's analysis","tags":["Alert Analysis"]}},"/alerts/{id}/attachments/{attachment_id}":{"delete":{"description":"","operationId":"delete-alert-attachment","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The ID of the alert to delete the attachment for.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"The ID of file attachment to delete.","in":"path","name":"attachment_id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}}],"responses":{"204":{"description":"No Content"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Delete a file attachment from an alert","tags":["Alert Analysis"]}},"/alerts/{id}/attachments/{attachment_id}/download":{"get":{"description":"","operationId":"download-alert-analysis-attachment","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The ID of the alert.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"The ID of the file attachment to download.","in":"path","name":"attachment_id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}}],"responses":{"200":{"description":"OK","headers":{"Content-Type":{"description":"The content type of the file attachment which is determined from the file upload itself.","schema":{"type":"string"}}}},"400":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"403":{"content":{"application/json":{"examples":{"forbidden":{"value":{"message":"forbidden"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Forbidden","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}}},"summary":"Download a file attachment from an alert","tags":["Alert Analysis"]}},"/alerts/{id}/audit":{"get":{"description":"","operationId":"get-alert-audit","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The ID for the alert to get the audit records for.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"The alert operation field name to sort the response by.","in":"query","name":"sort","schema":{"default":"alert_id","enum":["alert_id","history_created_at","operation"],"type":"string"}},{"description":"The order used to sort the response alerts field by.","in":"query","name":"order","schema":{"default":"desc","enum":["asc","desc"],"example":"asc","type":"string"}},{"description":"The number of alerts to return in each page. Max value of 100.","in":"query","name":"size","schema":{"default":10,"example":20,"type":"integer","maximum":100,"minimum":0}},{"description":"When listing by date range, since defines the starting date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"When listing by date range, until defines the ending date in RFC3339 format","in":"query","name":"until","schema":{"format":"date-time","type":"string"}},{"description":"Only used when fetching subsequent pages during pagination and will contain a unique page ID. No other query parameters can be used with page","in":"query","name":"page","schema":{"type":"string"}},{"description":"Filter by operation. This parameter can be specified multiple times.","in":"query","name":"operation","schema":{"enum":["read","update","rollback","delete","update_analysis","delete_analysis","create_attachment","delete_attachment","add_tags","remove_tags","download"],"type":"string"}}],"responses":{"200":{"content":{"application/json":{"examples":{"list-alerts":{"value":{"history":[{"alert_id":"cmuh3gc77f5qjuh393s0","history_created_at":"2024-02-02T16:01:14.868Z","id":"cmuh3im6ilcc4m24o070","monitor_id":"cmkjgpondpooldkse410","operation":"read","previous_status":"read","tenant_id":"5541ab0d-f16a-4354-b025-1239048935","to_status":"read","user_email":"John Doe","user_id":"1239048935-6ca8-103c-9ee0-4bc16e027a2d"},{"alert_id":"cmuh3gc77f5qjuh393s0","history_created_at":"2024-02-02T16:01:11.74Z","id":"cmuh3hu6ilcc4m24o060","monitor_id":"cmkjgpondpooldkse410","operation":"update","previous_status":"new","tenant_id":"5541ab0d-f16a-4354-b025-1239048935","to_status":"read","user_email":"Jane Smith","user_id":"1239048935-6ca8-103c-9ee0-4bc16e027a2d"}]}}},"schema":{"$ref":"#/components/schemas/AlertAuditRecords"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"default":"application/json","example":"application/json","type":"string"}},"Link":{"description":"If another page of results is available for pagination, the Link header will contain the URI used to fetch the next page.","schema":{"example":"<https://api.intelligence.mandiant.com/v4/dtm/alerts/cmuh3gc77f5qjuh393s0/audit?page=c52e5bc1hrv40t8d0gvg>; rel=\"next\"","type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List audit records for a given alert","tags":["Alert Audit"]}},"/alerts/audit":{"get":{"description":"","operationId":"get-all-alert-audit","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The alert operation field name to sort the response by.","in":"query","name":"sort","schema":{"default":"alert_id","enum":["alert_id","history_created_at","operation"],"type":"string"}},{"description":"The order used to sort the response alerts field by.","in":"query","name":"order","schema":{"default":"desc","enum":["asc","desc"],"example":"asc","type":"string"}},{"description":"The number of alerts to return in each page. Max value of 100.","in":"query","name":"size","schema":{"default":10,"example":20,"type":"integer","maximum":100,"minimum":0}},{"description":"When listing by date range, since defines the starting date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"When listing by date range, until defines the ending date in RFC3339 format","in":"query","name":"until","schema":{"format":"date-time","type":"string"}},{"description":"Only used when fetching subsequent pages during pagination and will contain a unique page ID. No other query parameters can be used with page","in":"query","name":"page","schema":{"type":"string"}},{"description":"Filter by operation. This parameter can be specified multiple times.","in":"query","name":"operation","schema":{"enum":["read","update","rollback","delete","update_analysis","delete_analysis","create_attachment","delete_attachment","add_tags","remove_tags","download"],"type":"string"}}],"responses":{"200":{"content":{"application/json":{"examples":{"list-alert-audit":{"value":{"history":[{"alert_id":"cmuh3gc77f5qjuh393s0","history_created_at":"2024-02-02T16:01:14.868Z","id":"cmuh3im6ilcc4m24o070","monitor_id":"cmkjgpondpooldkse410","operation":"read","previous_status":"read","tenant_id":"5541ab0d-f16a-4354-b025-1239048935","to_status":"read","user_email":"John Doe","user_id":"1239048935-6ca8-103c-9ee0-4bc16e027a2d"},{"alert_id":"cmuh1tc77f5qjuh392l0","history_created_at":"2024-02-02T16:01:11.74Z","id":"cmuh3hu6ilcc4m24o060","monitor_id":"cmkjgpondpooldkse410","operation":"update","previous_status":"new","tenant_id":"5541ab0d-f16a-4354-b025-1239048935","to_status":"read","user_email":"Jane Smith","user_id":"1239048935-6ca8-103c-9ee0-4bc16e027a2d"}]}}},"schema":{"$ref":"#/components/schemas/AlertAuditRecords"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"default":"application/json","example":"application/json","type":"string"}},"Link":{"description":"If another page of results is available for pagination, the Link header will contain the URI used to fetch the next page.","schema":{"example":"<https://api.intelligence.mandiant.com/v4/dtm/alerts/audit?page=c52e5bc1hrv40t8d0gvg>; rel=\"next\"","type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List alert audit records","tags":["Alert Audit"]}},"/alerts/bulk":{"post":{"description":"","operationId":"post-alerts-bulk","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The content type of the body.","in":"header","name":"Content-Type","required":true,"schema":{"enum":["application/json"],"type":"string"}}],"requestBody":{"content":{"application/json":{"examples":{"alert-bulk-update-request":{"value":{"patch":[{"id":"c6pl4eo1148jji4ad7l0","status":"read"},{"id":"c6pl4eo1148jji4ad7lg","status":"read"},{"id":"c6pl4eo1148jji4ad7m0","status":"read","tags":["my-tag","another-tag"]}]}}},"schema":{"$ref":"#/components/schemas/AlertBulk"}}},"description":"A bulk request body includes the http method (only patch supported) with an array of bulk operations to apply. Each bulk operation is an object containing the id of the alert to apply the operation to and any properties/values to update as part of the bulk request."},"responses":{"200":{"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"on or more IDs are invalid"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"403":{"content":{"application/json":{"examples":{"forbidden":{"value":{"message":"forbidden"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Forbidden","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}}},"summary":"Synchronously bulk update alerts","tags":["DTM Alerts"]}},"/alerts/bulk/apply":{"post":{"description":"","operationId":"post-alerts-bulk-apply","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The content type of the body.","in":"header","name":"Content-Type","required":true,"schema":{"enum":["application/json"],"type":"string"}},{"description":"If true, then alert buckets are updated where applicable.","in":"query","name":"buckets","schema":{"default":false,"type":"boolean"}},{"description":"Only return alerts for the given monitor ID. This parameter can be specified multiple times to filter on more than one monitor ID.","in":"query","name":"monitor_id","schema":{"example":"c4fcpm2bqsiatib6i4h0","type":"string"}},{"description":"If true, then only alerts that have analysis are returned. An alert has anlysis if it has either analysis text or analysis file attachments.","in":"query","name":"has_analysis","schema":{"type":"boolean"}},{"description":"When listing alerts by date range, since defines the starting date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"When listing alerts by date range, until defines the ending date in RFC3339 format","in":"query","name":"until","schema":{"format":"date-time","type":"string"}},{"description":"Filter alerts by their status. This parameter can be specified multiple times.","in":"query","name":"status","schema":{"enum":["new","read","escalated","in_progress","closed","no_action_required","duplicate","not_relevant","tracked_external"],"type":"string"}},{"description":"Filter alerts by alert type. This parameter can be specified multiple times.","in":"query","name":"alert_type","schema":{"enum":["Compromised Credentials","Domain Discovery","Forum Post","Message","Paste","Shop Listing","Tweet","Web Content"],"type":"string"}},{"description":"Search alert and triggering doc contents based on a simple Lucene query string including 1 or more text values separated by AND or OR.","in":"query","name":"search","schema":{"type":"string"}},{"description":"If specified, then only alerts that have the given match value are returned. This parameter can be repeated multiple times.","in":"query","name":"match_value","schema":{"type":"string"}},{"description":"Filter alerts by tag(s). This parameter can be used more than once to filter on multiple tags.","in":"query","name":"tags","schema":{"type":"string"}},{"description":"When using the search parameter, its value can be base64 encoded in which case search_encoding indicates the value encoding type.","in":"query","name":"search_encoding","schema":{"enum":["base64"],"type":"string"}},{"description":"Return alerts that have the given severity. This parameter can be repeated multiple times.","in":"query","name":"severity","schema":{"enum":["high","medium","low"],"type":"string"}},{"description":"Filter alerts with mscores greater than or equal to the given value.","in":"query","name":"mscore_gte","schema":{"maximum":100,"minimum":0,"type":"integer"}}],"requestBody":{"content":{"application/json":{"examples":{"alert-bulk-apply-update-request":{"value":{"add_tags":["add_tag_1","add_tag_2"],"exlcude_ids":["alert_id_to_skip"],"remove_tags":["remove_tag_1","remove_tag_2"],"status":"read"}}},"schema":{"$ref":"#/components/schemas/AlertBulkApplyOp"}}},"description":"Asynchronously update alerts based on query parameters."},"responses":{"202":{"description":"Accepted and will be processed in the background."},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"on or more IDs are invalid"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"403":{"content":{"application/json":{"examples":{"forbidden":{"value":{"message":"forbidden"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Forbidden","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error","headers":{"Content-Type":{"description":"Response body content type","schema":{"type":"string"}}}}},"summary":"Asynchronously bulk update alerts using query params to target the alerts","tags":["DTM Alerts"]}},"/docs/{type}/{id}":{"get":{"description":"","operationId":"get-docs-type-id","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The accept type for the response","in":"header","name":"Accept","required":true,"schema":{"default":"application/json","type":"string"}},{"description":"If false, then the document's topics and labels are not returned in the response body.","in":"query","name":"refs","schema":{"type":"boolean"}},{"description":"Truncates document fields to the given length using unicode ellipsis (\\x2026) to indicate truncation","in":"query","name":"truncate","schema":{"type":"integer"}},{"description":"If true, any HTML content in the alert is sanitized to ensure it does not potentially contain malicious tags. If not used, be careful when rendering/using the alert/doc content. This param can also be specified as a json path in the alert document to sanitize and may be repeated in this case.","in":"query","name":"sanitize","schema":{"type":"string"}},{"description":"The document type to fetch","in":"path","name":"type","required":true,"schema":{"enum":["document_analysis","domain_discovery","email_analysis","forum_post","paste","shop_listing","tweet","web_content_publish"],"type":"string"}},{"description":"The document ID to fetch","in":"path","name":"id","required":true,"schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Doc"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Retrieve an indexed document by its type and ID","tags":["DTM Docs"]}},"/docs/{type}/{id}/labels":{"get":{"description":"","operationId":"get-docs-type-id-labels","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The document type.","in":"path","name":"type","required":true,"schema":{"type":"string"}},{"description":"The document's ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"examples":{"get-labels":{"value":{"labels":[{"classifier":"classifier-language","confidence":53,"element_path":"body","id":"747f72e9-1a93-477e-a204-ac17ae78479e","label":"en","version":"1-0-0"},{"classifier":"classifier-threat","confidence":100,"element_path":"","id":"c155dcad-9e90-480e-889b-985e507df477","label":"information-security/malware/ransomware","version":"2-0-0"}]}}},"schema":{"$ref":"#/components/schemas/Labels"}}},"description":"OK"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Fetch the labels for an existing document","tags":["DTM Docs"]}},"/docs/{type}/{id}/topics":{"get":{"description":"","operationId":"get-docs-type-id-topics","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The type of document for which the topics will be searched.","in":"path","name":"type","required":true,"schema":{"type":"string"}},{"description":"The ID of the document to fetch the topics for.","in":"path","name":"id","required":true,"schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"examples":{"get-topics":{"value":{"topics":[{"confidence":100,"entity_locations":[{"element_path":"body","offsets":[55,59]}],"extractor":"analysis-pipeline.preprocessor","extractor_version":"1.0.0","id":"7c4b1126-40e5-4c18-bec2-6568c8a3a85a","type":"domain","value":"t.co"}]}}},"schema":{"$ref":"#/components/schemas/Topics"}}},"description":"OK"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Fetch the topics for an existing document","tags":["DTM Docs"]}},"/docs/search":{"post":{"description":"","operationId":"post-docs-search","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The content type of the request body","in":"header","name":"Content-Type","required":true,"schema":{"enum":["application/json"],"type":"string"}},{"description":"The number of results to return in each page.","in":"query","name":"size","schema":{"maximum":25,"minimum":0,"type":"integer"}},{"description":"The timestamp to search for documents since.","in":"query","name":"since","schema":{"type":"string"}},{"description":"The timestamp to search for documents from.","in":"query","name":"until","schema":{"type":"string"}},{"description":"The page ID to fetch the page for. This is only used when paginating through pages greater than the first page of results.","in":"query","name":"page","schema":{"type":"string"}},{"description":"Repeatable. If specified, the search is only executed on the given document types.","in":"query","name":"doc_type","schema":{"type":"string"}},{"description":"The number of characters to truncate all document fields to in the response.","in":"query","name":"truncate","schema":{"type":"integer"}},{"description":"If true (default), any HTML content in the document fields are sanitized to remove links, scripts, etc.","in":"query","name":"sanitize","schema":{"type":"boolean"}},{"description":"Repeatable. If specified, the search is only executed on documents with the specified threat types.","in":"query","name":"threat_type","schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"properties":{"query":{"description":"The lucene like query string for your document search.","type":"string"}},"required":["query"],"type":"object"}}},"description":"The query to use for searching documents."},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DocSearchResponse"}}},"description":"OK","headers":{"Content-Type":{"description":"The content type of the response body.","schema":{"type":"string"}},"Link":{"description":"If more pages are available, the rel=next link will be set with the next page URL.","schema":{"type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Search for documents","tags":["DTM Docs"]}},"/monitors":{"get":{"description":"","operationId":"get-monitors","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The monitor field name to sort the response monitors by.","in":"query","name":"sort","schema":{"default":"created_at","enum":["id","name","description","created_at","updated_at"],"example":"updated_at","type":"string"}},{"description":"The order used to sort the response monitors.","in":"query","name":"order","schema":{"default":"desc","enum":["desc","asc"],"example":"asc","type":"string"}},{"description":"The number of monitors to return in each page.","in":"query","name":"size","schema":{"default":10,"example":20,"type":"integer"}},{"description":"The type of content accepted.","in":"header","name":"Accept","schema":{"default":"application/json","example":"application/json","type":"string"}},{"description":"When listing monitors by date range, since defines the starting date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"When listing monitors by date range, until defines the ending date in RFC3339 format","in":"query","name":"until","schema":{"type":"string"}},{"description":"Only used when fetching subsequent pages during pagination and will contain a unique page ID. No other query parameters can be used with page","in":"query","name":"page","schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitors"}}},"description":"OK","headers":{"Link":{"description":"If another page of results is available for pagination, the Link header will contain the URI used to fetch the next page.","schema":{"example":"<https://api.intelligence.mandiant.com/v4/dtm/monitors?page=c52e5bc1hrv40t8d0gvg>; rel=\"next\"","type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List monitors","tags":["Monitors"]},"post":{"description":"","operationId":"post-monitor","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"example":"application/json","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}},"description":"Create a new monitor."},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Create a new monitor","tags":["Monitors"]}},"/monitors/{id}":{"delete":{"description":"","operationId":"delete-monitor-id","parameters":[{"description":"The monitor ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}}],"responses":{"204":{"description":"No Content"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Delete an existing monitor","tags":["Monitors"]},"get":{"description":"","operationId":"get-monitor-id","parameters":[{"description":"The monitor ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Accept","required":true,"schema":{"default":"application/json","example":"application/json","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Get a monitor by its ID","tags":["Monitors"]},"patch":{"description":"","operationId":"patch-monitor-id","parameters":[{"description":"The monitor ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The accept type supported in the response.","in":"header","name":"Accept","required":true,"schema":{"default":"application/json","example":"application/json","type":"string"}},{"description":"The content type of the request body.","in":"header","name":"Content-Type","required":true,"schema":{"default":"application/json","example":"application/json","type":"string"}}],"requestBody":{"content":{"application/json":{"examples":{"patch-monitor":{"value":{"description":"My updated description"}}},"schema":{"$ref":"#/components/schemas/Monitor"}}},"description":"The monitor fields to update."},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Partial update an existing monitor","tags":["Monitors"]},"put":{"description":"","operationId":"put-monitor-id","parameters":[{"description":"The monitor ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Accept","required":true,"schema":{"default":"application/json","example":"application/json","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Update an existing monitor","tags":["Monitors"]}},"/monitors/{id}/backfill":{"patch":{"description":"","operationId":"patch-monitor-backfill","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"example":"application/json","type":"string"}},{"description":"The ID of the monitor to begin a backfill for.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"Backfill alerts starting from this date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"Backfill alerts ending at this date in RFC3339 format","in":"query","name":"until","schema":{"type":"string"}}],"responses":{"202":{"description":"Accepted"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Asynchronously backfill alerts for new domains","tags":["Monitors"]},"post":{"description":"","operationId":"post-monitor-backfill","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"example":"application/json","type":"string"}},{"description":"The ID of the monitor to begin a backfill for.","in":"path","name":"id","required":true,"schema":{"example":"c4huif0mhcmiku5g7jsg","type":"string"}},{"description":"Backfill alerts starting from this date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"Backfill alerts ending at this date in RFC3339 format","in":"query","name":"until","schema":{"type":"string"}}],"responses":{"202":{"description":"Accepted"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Asynchronously backfill alerts for the monitor","tags":["Monitors"]}},"/monitors/{id}/backfill/esimate":{"patch":{"description":"","operationId":"patch-monitor-backfill-estimate","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"example":"application/json","type":"string"}},{"description":"The monitor ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Backfill alerts starting from this date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"Backfill alerts ending at this date in RFC3339 format","in":"query","name":"until","schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MonitorBackfillEstimate"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Estimate how many alerts will be created for the backfill of an updated monitor","tags":["Monitors"]}},"/monitors/backfill/esimate":{"post":{"description":"","operationId":"post-monitor-backfill-estimate","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"example":"application/json","type":"string"}},{"description":"Backfill alerts starting from this date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"Backfill alerts ending at this date in RFC3339 format","in":"query","name":"until","schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Monitor"}}}},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MonitorBackfillEstimate"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Estimate how many alerts will be created for the backfill of a newly created monitor","tags":["Monitors"]}},"/monitors/templates":{"get":{"description":"","operationId":"get-monitor-templates","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The type of content accepted.","in":"header","name":"Accept","schema":{"default":"application/json","example":"application/json","type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MonitorTemplates"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List monitor templates for top DTM use cases","tags":["Monitors"]}},"/settings/domains":{"get":{"description":"","operationId":"get-verified-domains","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The field to sort the response objects by.","in":"query","name":"sort","schema":{"default":"created_at","enum":["id","domain","status","created_at","updated_at"],"example":"updated_at","type":"string"}},{"description":"The order used to sort the response objects.","in":"query","name":"order","schema":{"default":"desc","enum":["desc","asc"],"example":"asc","type":"string"}},{"description":"The number of objects to return in each page.","in":"query","name":"size","schema":{"default":10,"example":20,"type":"integer"}},{"description":"The type of content accepted.","in":"header","name":"Accept","schema":{"default":"application/json","example":"application/json","type":"string"}},{"description":"When listing by date range, since defines the starting date in RFC3339 format","in":"query","name":"since","schema":{"format":"date-time","type":"string"}},{"description":"When listing by date range, until defines the ending date in RFC3339 format","in":"query","name":"until","schema":{"type":"string"}},{"description":"Only used when fetching subsequent pages during pagination and will contain a unique page ID. No other query parameters can be used with page","in":"query","name":"page","schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifiedDomains"}}},"description":"OK","headers":{"Link":{"description":"If another page of results is available for pagination, the Link header will contain the URI used to fetch the next page.","schema":{"example":"<https://api.intelligence.mandiant.com/v4/dtm/settings/domains?page=c52e5bc1hrv40t8d0gvg>; rel=\"next\"","type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List verified domains for the current organization","tags":["Verified Domains"]},"post":{"description":"","operationId":"post-domain","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"example":"application/json","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifiedDomainOp"}}},"description":"The new verified domain to add."},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifiedDomain"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Add a new verified domain","tags":["Verified Domains"]}},"/settings/domains/{id}":{"delete":{"description":"","operationId":"delete-domain-id","parameters":[{"description":"The domain ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}}],"responses":{"204":{"description":"No Content"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Delete an existing verified domain.","tags":["Verified Domains"]},"get":{"description":"","operationId":"get-verified-domain","parameters":[{"description":"The domain ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifiedDomain"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Get a verified domain by ID","tags":["Verified Domains"]}},"/settings/domains/{id}/reverify":{"parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The domain ID.","in":"path","name":"id","required":true,"schema":{"type":"string"}}],"post":{"description":"","operationId":"reverify-domain-id","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifiedDomain"}}},"description":"OK"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"Not Found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Perform a synchronous verification check for the domain's TXT record code.","tags":["Verified Domains"]}},"/settings/domains/bulk":{"post":{"description":"","operationId":"post-domain-bulk","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"application/json","in":"header","name":"Content-Type","required":true,"schema":{"example":"application/json","type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifiedDomainOps"}}},"description":"The new verified domains to add."},"responses":{"200":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifiedDomains"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Add new verified domains","tags":["Verified Domains"]}},"/settings/domains/txt_record":{"get":{"description":"","operationId":"get-verified-domains-csv","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"Only text/csv is supported.","in":"header","name":"Accept","schema":{"default":"text/csv","type":"string"}}],"responses":{"200":{"content":{"text/csv":{"schema":{"$ref":"#/components/schemas/VerifiedDomains"}}},"description":"OK"},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"Bad Request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"Unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-error":{"value":{"message":"Internal Server Error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Download all verified domains with their TXT verification code in CSV format","tags":["Verified Domains"]}},"/settings/email":{"get":{"description":"","operationId":"list-settings-email","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"The accept type","in":"header","name":"Acccept","required":true,"schema":{"enum":["application/json"],"type":"string"}}],"responses":{"200":{"content":{"application/json":{"examples":{"list-email-settings":{"value":{"email_settings":[{"created_at":"2022-01-20T17:29:20.205Z","delivery_times":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"frequency":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"],"id":"c7kpns36fv7ll65ekbog","recipients":[{"email_address":"username1@mydomain.com","status":"verified","verification_sent_at":"2022-01-20T17:29:20.205Z"},{"email_address":"username2@mydomain.com","status":"invalid","verification_sent_at":"2022-01-20T17:29:20.205Z"}],"timezone_location":"America/Denver","updated_at":"2022-01-20T17:30:00.013Z"}]}}},"schema":{"$ref":"#/components/schemas/EmailSettings"}}},"description":"OK","headers":{"Content-Type":{"description":"Response content type","schema":{"enum":["application/json"],"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"List email settings","tags":["Email Settings"]},"post":{"description":"","operationId":"post-settings-email","parameters":[{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"Request content type","in":"header","name":"Content-Type","required":true,"schema":{"enum":["application/json"],"type":"string"}}],"requestBody":{"content":{"application/json":{"examples":{"create-email-setting":{"value":{"delivery_times":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"frequency":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"],"recipients":[{"email_address":"username1@yourdomain.com"},{"email_address":"username2@yourdomain.com"}],"timezone_location":"America/Denver"}}},"schema":{"$ref":"#/components/schemas/EmailSetting"}}}},"responses":{"200":{"content":{"application/json":{"examples":{"email-setting-response":{"value":{"created_at":"2022-01-20T17:29:20.205Z","delivery_times":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"frequency":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"],"id":"c7kpns36fv7ll65ekbog","recipients":[{"email_address":"username1@yourdomain.com","status":"pending","verification_sent_at":"2022-01-20T17:29:20.205Z"},{"email_address":"username2@yourdomain.com","status":"pending","verification_sent_at":"2022-01-20T17:29:20.205Z"}],"timezone_location":"America/Denver","updated_at":"2022-01-20T17:29:20.205Z"}}},"schema":{"$ref":"#/components/schemas/EmailSetting"}}},"description":"OK","headers":{"Content-Type":{"description":"Response content type","schema":{"enum":["application/json"],"type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"bad request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Create email settings","tags":["Email Settings"]}},"/settings/email/{id}":{"delete":{"description":"","operationId":"delete-settings-email-id","parameters":[{"in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}}],"responses":{"204":{"description":"No Content"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"not found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Delete email settings","tags":["Email Settings"]},"get":{"description":"","operationId":"get-settings-email-id","parameters":[{"in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"Accept type","in":"header","name":"Accept","required":true,"schema":{"enum":["application/json"],"type":"string"}}],"responses":{"200":{"content":{"application/json":{"examples":{"get-email-setting":{"value":{"created_at":"2022-01-20T17:29:20.205Z","delivery_times":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"frequency":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"],"id":"c7kpns36fv7ll65ekbog","recipients":[{"email_address":"username1@yourdomain.com","status":"verified","verification_sent_at":"2022-01-20T17:29:20.205Z"},{"email_address":"username2@yourdomain.com","status":"invalid","verification_sent_at":"2022-01-20T17:29:20.205Z"}],"timezone_location":"America/Denver","updated_at":"2022-01-20T17:30:00.013Z"}}},"schema":{"$ref":"#/components/schemas/EmailSetting"}}},"description":"OK","headers":{"Content-Type":{"description":"Response content type","schema":{"enum":["application/json"],"type":"string"}}}},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"404":{"content":{"application/json":{"examples":{"not-found":{"value":{"message":"not found"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Not Found"},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Fetch an email setting","tags":["Email Settings"]},"patch":{"description":"","operationId":"patch-settings-email-id","parameters":[{"in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"Accept type","in":"header","name":"Accept","schema":{"enum":["application/json"],"type":"string"}},{"description":"Request content type","in":"header","name":"Content-Type","required":true,"schema":{"enum":["application/json"],"type":"string"}}],"requestBody":{"content":{"application/json":{"examples":{"patch-email-setting":{"value":{"delivery_times":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"frequency":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"]}}},"schema":{"$ref":"#/components/schemas/EmailSetting"}}}},"responses":{"200":{"content":{"application/json":{"examples":{"patch-response":{"value":{"created_at":"2022-01-20T17:29:20.205Z","delivery_times":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"frequency":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"],"id":"c7kpns36fv7ll65ekbog","recipients":[{"email_address":"username1@yourdomain.com","status":"pending","verification_sent_at":"2022-01-20T17:29:20.205Z"},{"email_address":"username2@yourdomain.com","status":"pending","verification_sent_at":"2022-01-20T17:29:20.205Z"}],"timezone_location":"America/Denver","updated_at":"2022-01-20T17:39:10.205Z"}}},"schema":{"$ref":"#/components/schemas/EmailSetting"}}},"description":"OK","headers":{"Content-Type":{"description":"Response content type","schema":{"enum":["application/json"],"type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"bad request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Update email settings","tags":["Email Settings"]}},"/settings/email/{id}/reverify":{"post":{"description":"","operationId":"post-settings-email-id-reverify","parameters":[{"in":"path","name":"id","required":true,"schema":{"type":"string"}},{"description":"Your API key","in":"header","name":"x-apikey","required":true,"schema":{"type":"string"}},{"description":"Request content type","in":"header","name":"Content-Type","schema":{"enum":["application/json"],"type":"string"}}],"requestBody":{"content":{"application/json":{"examples":{"reverify":{"value":{"recipients":["user@example.com"]}}},"schema":{"$ref":"#/components/schemas/EmailRecipients"}}}},"responses":{"200":{"content":{"application/json":{"examples":{"reverify-response":{"value":{"created_at":"2022-01-20T17:29:20.205Z","delivery_times":["00:00","00:30","01:00","01:30","02:00","02:30","03:00","03:30","04:00","04:30","05:00","05:30","06:00","06:30","07:00","07:30","08:00","08:30","09:00","09:30","10:00","10:30","11:00","11:30","12:00","12:30","13:00","13:30","14:00","14:30","15:00","15:30","16:00","16:30","17:00","17:30","18:00","18:30","19:00","19:30","20:00","20:30","21:00","21:30","22:00","22:30","23:00","23:30"],"frequency":["sunday","monday","tuesday","wednesday","thursday","friday","saturday"],"id":"c7kpns36fv7ll65ekbog","recipients":[{"email_address":"username1@yourdomain.com","status":"pending","verification_sent_at":"2022-01-20T17:29:20.205Z"},{"email_address":"username2@yourdomain.com","status":"pending","verification_sent_at":"2022-01-20T17:29:20.205Z"}],"timezone_location":"America/Denver","updated_at":"2022-01-20T17:30:00.013Z"}}},"schema":{"$ref":"#/components/schemas/EmailSetting"}}},"description":"OK","headers":{"Content-Type":{"description":"Response content type","schema":{"enum":["application/json"],"type":"string"}}}},"400":{"content":{"application/json":{"examples":{"bad-request":{"value":{"message":"bad request"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Bad Request"},"401":{"content":{"application/json":{"examples":{"unauthorized":{"value":{"message":"unauthorized"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Unauthorized"},"500":{"content":{"application/json":{"examples":{"internal-server-error":{"value":{"message":"internal server error"}}},"schema":{"$ref":"#/components/schemas/Response-message"}}},"description":"Internal Server Error"}},"summary":"Reverify one or more email recipients","tags":["Email Settings"]}}},"security":[{}],"servers":[{"url":"https://www.virustotal.com/api/v3/dtm"}],"tags":[{"name":"DTM Alerts"},{"name":"Alert Analysis"},{"name":"Alert Audit"},{"name":"Monitors"},{"name":"Email Settings"},{"name":"Verified Domains"},{"name":"DTM Docs"},{"name":"Vocab"}],"x-readme":{"explorer-enabled":true,"proxy-enabled":false,"samples-enabled":true}}