@@ -58505,6 +58505,155 @@ components:
5850558505 description: Version of the updated signal. If server side version is higher, update will be rejected.
5850658506 format: int64
5850758507 type: integer
58508+ SecurityMonitoringSignalsBulkAssigneeUpdateAttributes:
58509+ description: Attributes describing the new assignees for a bulk signal update.
58510+ properties:
58511+ assignee:
58512+ description: UUID of the user to assign to the signal. Use an empty string to unassign.
58513+ example: 773b045d-ccf8-4808-bd3b-955ef6a8c940
58514+ type: string
58515+ version:
58516+ $ref: "#/components/schemas/SecurityMonitoringSignalVersion"
58517+ required:
58518+ - assignee
58519+ type: object
58520+ SecurityMonitoringSignalsBulkAssigneeUpdateData:
58521+ description: Data for updating the assignees for multiple security signals.
58522+ properties:
58523+ attributes:
58524+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkAssigneeUpdateAttributes"
58525+ id:
58526+ description: The unique ID of the security signal.
58527+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58528+ type: string
58529+ type:
58530+ $ref: "#/components/schemas/SecurityMonitoringSignalType"
58531+ required:
58532+ - id
58533+ - attributes
58534+ type: object
58535+ SecurityMonitoringSignalsBulkAssigneeUpdateRequest:
58536+ description: Request body for updating the assignee of multiple security signals.
58537+ properties:
58538+ data:
58539+ description: An array of signal assignee updates.
58540+ items:
58541+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkAssigneeUpdateData"
58542+ maxItems: 199
58543+ type: array
58544+ required:
58545+ - data
58546+ type: object
58547+ SecurityMonitoringSignalsBulkStateUpdateData:
58548+ description: Data for updating the state for multiple security signals.
58549+ properties:
58550+ attributes:
58551+ $ref: "#/components/schemas/SecurityMonitoringSignalStateUpdateAttributes"
58552+ id:
58553+ description: The unique ID of the security signal.
58554+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58555+ type: string
58556+ type:
58557+ $ref: "#/components/schemas/SecurityMonitoringSignalType"
58558+ required:
58559+ - id
58560+ - attributes
58561+ type: object
58562+ SecurityMonitoringSignalsBulkStateUpdateRequest:
58563+ description: Request body for updating the triage states of multiple security signals.
58564+ properties:
58565+ data:
58566+ description: An array of signal state updates.
58567+ items:
58568+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkStateUpdateData"
58569+ maxItems: 199
58570+ type: array
58571+ required:
58572+ - data
58573+ type: object
58574+ SecurityMonitoringSignalsBulkTriageEvent:
58575+ description: A single signal event entry in a bulk triage update response.
58576+ properties:
58577+ event:
58578+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageEventAttributes"
58579+ id:
58580+ description: The unique ID of the security signal.
58581+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58582+ type: string
58583+ required:
58584+ - id
58585+ - event
58586+ type: object
58587+ SecurityMonitoringSignalsBulkTriageEventAttributes:
58588+ description: Triage attributes of a security signal returned in a bulk update response.
58589+ properties:
58590+ archive_comment:
58591+ $ref: "#/components/schemas/SecurityMonitoringSignalArchiveComment"
58592+ archive_comment_timestamp:
58593+ description: Timestamp of the last edit to the archive comment.
58594+ format: int64
58595+ type: integer
58596+ archive_comment_user:
58597+ $ref: "#/components/schemas/SecurityMonitoringTriageUser"
58598+ archive_reason:
58599+ $ref: "#/components/schemas/SecurityMonitoringSignalArchiveReason"
58600+ assignee:
58601+ $ref: "#/components/schemas/SecurityMonitoringTriageUser"
58602+ id:
58603+ description: The unique ID of the security signal.
58604+ example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA
58605+ type: string
58606+ incident_ids:
58607+ $ref: "#/components/schemas/SecurityMonitoringSignalIncidentIds"
58608+ state:
58609+ $ref: "#/components/schemas/SecurityMonitoringSignalState"
58610+ state_update_timestamp:
58611+ description: Timestamp of the last state update.
58612+ format: int64
58613+ type: integer
58614+ state_update_user:
58615+ $ref: "#/components/schemas/SecurityMonitoringTriageUser"
58616+ required:
58617+ - id
58618+ - state
58619+ - assignee
58620+ - incident_ids
58621+ type: object
58622+ SecurityMonitoringSignalsBulkTriageUpdateResponse:
58623+ description: Response for a bulk triage update of security signals.
58624+ properties:
58625+ result:
58626+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageUpdateResult"
58627+ status:
58628+ description: The status of the bulk operation.
58629+ example: done
58630+ type: string
58631+ type:
58632+ description: The type of the response.
58633+ example: status
58634+ type: string
58635+ required:
58636+ - type
58637+ - status
58638+ - result
58639+ type: object
58640+ SecurityMonitoringSignalsBulkTriageUpdateResult:
58641+ description: The result payload of a bulk signal triage update.
58642+ properties:
58643+ count:
58644+ description: The number of signals updated.
58645+ example: 2
58646+ format: int64
58647+ type: integer
58648+ events:
58649+ description: The list of updated signals.
58650+ items:
58651+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageEvent"
58652+ type: array
58653+ required:
58654+ - count
58655+ - events
58656+ type: object
5850858657 SecurityMonitoringSignalsListResponse:
5850958658 description: "The response object with all security signals matching the request\nand pagination information."
5851058659 properties:
@@ -103394,6 +103543,88 @@ paths:
103394103543 operator: OR
103395103544 permissions:
103396103545 - security_monitoring_signals_read
103546+ /api/v2/security_monitoring/signals/bulk/assignee:
103547+ patch:
103548+ description: |-
103549+ Change the triage assignees of multiple security signals at once.
103550+ The maximum number of signals that can be updated in a single request is 199.
103551+ operationId: BulkEditSecurityMonitoringSignalsAssignee
103552+ requestBody:
103553+ content:
103554+ application/json:
103555+ schema:
103556+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkAssigneeUpdateRequest"
103557+ description: Attributes describing the signal assignee updates.
103558+ required: true
103559+ responses:
103560+ "200":
103561+ content:
103562+ application/json:
103563+ schema:
103564+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageUpdateResponse"
103565+ description: OK
103566+ "400":
103567+ content:
103568+ application/json:
103569+ schema:
103570+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103571+ description: Bad Request
103572+ "403":
103573+ content:
103574+ application/json:
103575+ schema:
103576+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103577+ description: Forbidden
103578+ "429":
103579+ $ref: "#/components/responses/TooManyRequestsResponse"
103580+ summary: Bulk update triage assignee of security signals
103581+ tags: ["Security Monitoring"]
103582+ x-codegen-request-body-name: body
103583+ "x-permission":
103584+ operator: OR
103585+ permissions:
103586+ - security_monitoring_signals_write
103587+ /api/v2/security_monitoring/signals/bulk/state:
103588+ patch:
103589+ description: |-
103590+ Change the triage states of multiple security signals at once.
103591+ The maximum number of signals that can be updated in a single request is 199.
103592+ operationId: BulkEditSecurityMonitoringSignalsState
103593+ requestBody:
103594+ content:
103595+ application/json:
103596+ schema:
103597+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkStateUpdateRequest"
103598+ description: Attributes describing the signal state updates.
103599+ required: true
103600+ responses:
103601+ "200":
103602+ content:
103603+ application/json:
103604+ schema:
103605+ $ref: "#/components/schemas/SecurityMonitoringSignalsBulkTriageUpdateResponse"
103606+ description: OK
103607+ "400":
103608+ content:
103609+ application/json:
103610+ schema:
103611+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103612+ description: Bad Request
103613+ "403":
103614+ content:
103615+ application/json:
103616+ schema:
103617+ $ref: "#/components/schemas/JSONAPIErrorResponse"
103618+ description: Forbidden
103619+ "429":
103620+ $ref: "#/components/responses/TooManyRequestsResponse"
103621+ summary: Bulk update triage state of security signals
103622+ tags: ["Security Monitoring"]
103623+ x-codegen-request-body-name: body
103624+ "x-permission":
103625+ operator: OR
103626+ permissions:
103627+ - security_monitoring_signals_write
103397103628 /api/v2/security_monitoring/signals/search:
103398103629 post:
103399103630 description: |-
0 commit comments