@@ -58503,6 +58503,155 @@ components:
5850358503 description: Version of the updated signal. If server side version is higher, update will be rejected.
5850458504 format: int64
5850558505 type: integer
58506+ SecurityMonitoringSignalsBulkAssigneeUpdateAttributes:
58507+ description: Attributes describing the new assignees for a bulk signal update.
58508+ properties:
58509+ assignee:
58510+ description: UUID of the user to assign to the signal. Use an empty string to unassign.
58511+ example: 773b045d-ccf8-4808-bd3b-955ef6a8c940
58512+ type: string
58513+ version:
58514+ $ref: "#/components/schemas/SecurityMonitoringSignalVersion"
58515+ required:
58516+ - assignee
58517+ type: object
58518+ SecurityMonitoringSignalsBulkAssigneeUpdateData:
58519+ description: Data for updating the assignees for multiple security signals.
58520+ properties:
58521+ attributes:
58522+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkAssigneeUpdateAttributes"
58523+ id:
58524+ description: The unique ID of the security signal.
58525+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58526+ type: string
58527+ type:
58528+ $ref: "#/components/schemas/SecurityMonitoringSignalType"
58529+ required:
58530+ - id
58531+ - attributes
58532+ type: object
58533+ SecurityMonitoringSignalsBulkAssigneeUpdateRequest:
58534+ description: Request body for updating the assignee of multiple security signals.
58535+ properties:
58536+ data:
58537+ description: An array of signal assignee updates.
58538+ items:
58539+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkAssigneeUpdateData"
58540+ maxItems: 199
58541+ type: array
58542+ required:
58543+ - data
58544+ type: object
58545+ SecurityMonitoringSignalsBulkStateUpdateData:
58546+ description: Data for updating the state for multiple security signals.
58547+ properties:
58548+ attributes:
58549+ $ref: "#/components/schemas/SecurityMonitoringSignalStateUpdateAttributes"
58550+ id:
58551+ description: The unique ID of the security signal.
58552+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58553+ type: string
58554+ type:
58555+ $ref: "#/components/schemas/SecurityMonitoringSignalType"
58556+ required:
58557+ - id
58558+ - attributes
58559+ type: object
58560+ SecurityMonitoringSignalsBulkStateUpdateRequest:
58561+ description: Request body for updating the triage states of multiple security signals.
58562+ properties:
58563+ data:
58564+ description: An array of signal state updates.
58565+ items:
58566+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkStateUpdateData"
58567+ maxItems: 199
58568+ type: array
58569+ required:
58570+ - data
58571+ type: object
58572+ SecurityMonitoringSignalsBulkTriageEvent:
58573+ description: A single signal event entry in a bulk triage update response.
58574+ properties:
58575+ event:
58576+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageEventAttributes"
58577+ id:
58578+ description: The unique ID of the security signal.
58579+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58580+ type: string
58581+ required:
58582+ - id
58583+ - event
58584+ type: object
58585+ SecurityMonitoringSignalsBulkTriageEventAttributes:
58586+ description: Triage attributes of a security signal returned in a bulk update response.
58587+ properties:
58588+ archive_comment:
58589+ $ref: "#/components/schemas/SecurityMonitoringSignalArchiveComment"
58590+ archive_comment_timestamp:
58591+ description: Timestamp of the last edit to the archive comment.
58592+ format: int64
58593+ type: integer
58594+ archive_comment_user:
58595+ $ref: "#/components/schemas/SecurityMonitoringTriageUser"
58596+ archive_reason:
58597+ $ref: "#/components/schemas/SecurityMonitoringSignalArchiveReason"
58598+ assignee:
58599+ $ref: "#/components/schemas/SecurityMonitoringTriageUser"
58600+ id:
58601+ description: The unique ID of the security signal.
58602+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58603+ type: string
58604+ incident_ids:
58605+ $ref: "#/components/schemas/SecurityMonitoringSignalIncidentIds"
58606+ state:
58607+ $ref: "#/components/schemas/SecurityMonitoringSignalState"
58608+ state_update_timestamp:
58609+ description: Timestamp of the last state update.
58610+ format: int64
58611+ type: integer
58612+ state_update_user:
58613+ $ref: "#/components/schemas/SecurityMonitoringTriageUser"
58614+ required:
58615+ - id
58616+ - state
58617+ - assignee
58618+ - incident_ids
58619+ type: object
58620+ SecurityMonitoringSignalsBulkTriageUpdateResponse:
58621+ description: Response for a bulk triage update of security signals.
58622+ properties:
58623+ result:
58624+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageUpdateResult"
58625+ status:
58626+ description: The status of the bulk operation.
58627+ example: done
58628+ type: string
58629+ type:
58630+ description: The type of the response.
58631+ example: status
58632+ type: string
58633+ required:
58634+ - type
58635+ - status
58636+ - result
58637+ type: object
58638+ SecurityMonitoringSignalsBulkTriageUpdateResult:
58639+ description: The result payload of a bulk signal triage update.
58640+ properties:
58641+ count:
58642+ description: The number of signals updated.
58643+ example: 2
58644+ format: int64
58645+ type: integer
58646+ events:
58647+ description: The list of updated signals.
58648+ items:
58649+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageEvent"
58650+ type: array
58651+ required:
58652+ - count
58653+ - events
58654+ type: object
5850658655 SecurityMonitoringSignalsListResponse:
5850758656 description: "The response object with all security signals matching the request\nand pagination information."
5850858657 properties:
@@ -103249,6 +103398,88 @@ paths:
103249103398 operator: OR
103250103399 permissions:
103251103400 - security_monitoring_signals_read
103401+ /api/v2/security_monitoring/signals/bulk/assignee:
103402+ patch:
103403+ description: |-
103404+ Change the triage assignees of multiple security signals at once.
103405+ The maximum number of signals that can be updated in a single request is 199.
103406+ operationId: BulkEditSecurityMonitoringSignalsAssignee
103407+ requestBody:
103408+ content:
103409+ application/json:
103410+ schema:
103411+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkAssigneeUpdateRequest"
103412+ description: Attributes describing the signal assignee updates.
103413+ required: true
103414+ responses:
103415+ "200":
103416+ content:
103417+ application/json:
103418+ schema:
103419+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageUpdateResponse"
103420+ description: OK
103421+ "400":
103422+ content:
103423+ application/json:
103424+ schema:
103425+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103426+ description: Bad Request
103427+ "403":
103428+ content:
103429+ application/json:
103430+ schema:
103431+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103432+ description: Forbidden
103433+ "429":
103434+ $ref: "#/components/responses/TooManyRequestsResponse"
103435+ summary: Bulk update triage assignee of security signals
103436+ tags: ["Security Monitoring"]
103437+ x-codegen-request-body-name: body
103438+ "x-permission":
103439+ operator: OR
103440+ permissions:
103441+ - security_monitoring_signals_write
103442+ /api/v2/security_monitoring/signals/bulk/state:
103443+ patch:
103444+ description: |-
103445+ Change the triage states of multiple security signals at once.
103446+ The maximum number of signals that can be updated in a single request is 199.
103447+ operationId: BulkEditSecurityMonitoringSignalsState
103448+ requestBody:
103449+ content:
103450+ application/json:
103451+ schema:
103452+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkStateUpdateRequest"
103453+ description: Attributes describing the signal state updates.
103454+ required: true
103455+ responses:
103456+ "200":
103457+ content:
103458+ application/json:
103459+ schema:
103460+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageUpdateResponse"
103461+ description: OK
103462+ "400":
103463+ content:
103464+ application/json:
103465+ schema:
103466+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103467+ description: Bad Request
103468+ "403":
103469+ content:
103470+ application/json:
103471+ schema:
103472+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103473+ description: Forbidden
103474+ "429":
103475+ $ref: "#/components/responses/TooManyRequestsResponse"
103476+ summary: Bulk update triage state of security signals
103477+ tags: ["Security Monitoring"]
103478+ x-codegen-request-body-name: body
103479+ "x-permission":
103480+ operator: OR
103481+ permissions:
103482+ - security_monitoring_signals_write
103252103483 /api/v2/security_monitoring/signals/search:
103253103484 post:
103254103485 description: |-
0 commit comments