Skip to main content

​
Overview

Allows the client to update open intelligence about an endpoint. The intelligence information must have been created by the same agent, on the same domain to be able to be updated.

​
HTTP request

POST /Agent/Intelligence/Update

​
Authentication

Requires a valid JWT bearer token.

​
Request (JSON)

{
	"objectId": Required(Str(PObjectId)),
	"Information":
	{
		"endpoint": Required(Str(PEndpoint)),
		"expires": Required(DateTime(PExpires>Now)),
	    "vector": Optional(Str(PVector)),
		"protocol": Optional(Str(PProtocol)),
		"classification": Optional(Str(PClassification)),
		"code": Optional(Str(PCode)),
		"message": Optional(Str(PMessage)),
		"Tag":Optional(
		{
			"name": Required(Str(PTagName)),
		    "value": Required(Str(PTagValue)),
			"type": Optional(Str(PTagType))
		}[]),
		"AgentProperty":Optional(
		{
			"name": Required(Str(PAgentPropertyName))
		}[])
	}
}

​
Input parameters

ParameterDescription
PObjectIdThe Object ID of the information, as it was returned when creating it.
PEndpointThe endpoint to which the information refers. It can be an IP endpoint, XMPP endpoint, etc. Format depends on the protocol used.
PExpiresWhen the information will be purged from the record.
PVectorA string representing the threat vector.
PProtocolA string representing the protocol used.
PClassificationA string representing a classification of the information.
PCodeA machine-readable string-valued code representing the message or type of information added.
PMessageA human readable message.
PTagNameName of information meta-tag associated with the information.
PTagValueValue of information meta-tag associated with the information.
PTagTypeXML data type of information (with prefix xs:). If recognized by the system, the corresponding string-valued tag value will be parsed and stored in parsed format for improved interoperability.
PAgentPropertyNameNamed of Agent property that will be stored with the information, together with the corresponding agent identity value (if one exists) of the agent user adding the intelligence. Adding agent information adds recipients decide wether to trust the information or not.

​
Response (JSON)

{
}

​
Notes

This endpoint uses the request schema notation described in Pattern matching.