'1.0', 'info' => ['style' => 'RPC', 'product' => 'mssp', 'version' => '2016-12-28'], 'directories' => [ 'ConfirmDjbhReport', 'CreateServiceLinkedRole', 'CreateServiceWorkOrder', 'DeleteDjbhReport', 'DescribeServiceLinkedRole', 'DisposeServiceWorkOrder', 'DisposeWorkTask', 'GetAlarmDetailById', 'GetAttackedAssetDeal', 'GetBaselineSummary', 'GetConsoleScore', 'GetDetailById', 'GetDocumentDownloadUrl', 'GetDocumentPage', 'GetDocumentSummary', 'GetRecentDocument', 'GetSafetyCover', 'GetSowList', 'GetSuspEventPage', 'GetSuspEventSummary', 'GetSuspPageSummary', 'GetUserStatus', 'GetVulItemPage', 'GetVulListById', 'GetVulPageSummary', 'GetVulSummary', 'GetWorkTaskSummary', 'PageServiceCustomer', 'SendCustomEvent', ], 'components' => [ 'schemas' => [], ], 'apis' => [ 'ConfirmDjbhReport' => [ 'summary' => 'Confirms receipt of a classified protection evaluation report.', 'path' => '', 'methods' => ['post'], 'schemes' => ['https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeNodes' => ['FEATUREsos6B7B1Q'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'Id', 'in' => 'formData', 'schema' => ['description' => 'The primary key ID of the report.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '24563', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => 'EF801DD1-D934-51B3-92D4-776CE17B184F'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'OK', 'title' => ''], 'Message' => ['description' => 'The returned message.', 'type' => 'string', 'example' => 'Successful!', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'string', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"EF801DD1-D934-51B3-92D4-776CE17B184F\\",\\n \\"Code\\": \\"OK\\",\\n \\"Message\\": \\"Successful!\\",\\n \\"HttpStatusCode\\": \\"200\\",\\n \\"Success\\": \\"true\\"\\n}","type":"json"}]', 'title' => 'Confirm receipt of a classified protection evaluation report', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'update', 'ramAction' => [ 'action' => 'yundun-mss:ConfirmDjbhReport', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'CreateServiceLinkedRole' => [ 'summary' => 'Creates a service-linked role.', 'methods' => ['post', 'get'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'write', 'systemTags' => [ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '83729', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'Lang', 'in' => 'query', 'schema' => ['description' => 'The language.', 'type' => 'string', 'required' => false, 'example' => 'zh', 'title' => ''], ], [ 'name' => 'RegionId', 'in' => 'query', 'schema' => ['description' => 'The region ID.', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'type' => 'object', 'properties' => [ 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '592B80F0-7674-56A4-9027-8A0A9ACDBD56', 'title' => ''], ], 'description' => '', 'title' => '', 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Create a service-linked role', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'create', 'ramAction' => [ 'action' => 'yundun-mss:CreateServiceLinkedRole', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"592B80F0-7674-56A4-9027-8A0A9ACDBD56\\"\\n}","type":"json"}]', ], 'CreateServiceWorkOrder' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'write', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '216184', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'WorkOrderName', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The name of the ticket.', 'type' => 'string', 'required' => true, 'example' => '安全月报交付任务'], ], [ 'name' => 'WorkOrderType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The type of the ticket.', 'enumValueTitles' => [ 'YEAR_MEETING' => 'annual meeting.', 'SYSTEM_VULNERABILITY_SCAN' => 'scanner vulnerability scan.', 'RISK_BRIEFING' => 'risk briefing.', 'SUMMARY_REPORT' => 'summary report.', 'DING_TALK_CUSTOMER' => 'DingTalk customer consultation.', 'MONTH_REPORT' => 'monthly report.', 'YEAR_REPORT' => 'annual report.', 'OTHER_REPORTS' => 'other reports.', 'PLATFORM_VULNERABILITY_MONITOR' => 'vulnerability inspection and monitoring.', 'PROJECT_PLAN' => 'project plan.', 'PROJECT_SUMMARY_MEETING' => 'project summary meeting.', 'SYSTEM_SECURITY_ACCESS' => 'security assessment.', 'PROJECT_QUARTERLY_MEETING' => 'project quarterly meeting.', 'LARGE_SCREEN' => 'security dashboard.', 'USER_SURVEY' => 'user survey.', 'CUSTOMER_VIEW' => 'customer follow-up.', 'MANUAL' => 'manual operation.', 'RISK_NOTIFY' => 'risk notification.', 'QUARTERLY_REPORT' => 'quarterly report.', 'YUNDUN_VULNERABILITY_SCAN' => 'Security Center vulnerability scan.', 'PROJECT_LAUNCH_MEETING' => 'project launch meeting.', ], 'type' => 'string', 'required' => true, 'example' => 'MONTH_REPORT', ], ], [ 'name' => 'WorkOrderSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The source of the ticket.', 'type' => 'string', 'required' => true, 'example' => '工单迁移'], ], [ 'name' => 'WorkOrderStatus', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The status of the ticket.', 'enumValueTitles' => ['UNPROCESSED' => 'pending.', 'PROCESSING' => 'processing.', 'BACK' => 'returned.', 'PROCESSED' => 'completed.', 'INVALID' => 'false positive.', 'IGNORED' => 'ignored.'], 'type' => 'string', 'required' => true, 'example' => 'UNPROCESSED', ], ], [ 'name' => 'CustomerId', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The ID of the customer.', 'type' => 'string', 'required' => true, 'example' => '1477832102462645'], ], [ 'name' => 'StartTime', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1734788109000'], ], [ 'name' => 'Operator', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The operator.', 'type' => 'string', 'required' => true, 'example' => '426556'], ], [ 'name' => 'OperateType', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The type of the operation.', 'type' => 'string', 'required' => true, 'example' => 'CREATE'], ], [ 'name' => 'OperateRemark', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The remarks for the operation.', 'type' => 'string', 'required' => true, 'example' => '新建'], ], [ 'name' => 'WorkOrderDetail', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The details of the ticket.', 'type' => 'string', 'required' => true, 'example' => '{"questionDetail":"测试工单","answerDetail":""}'], ], [ 'name' => 'DurationDay', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The duration in days.', 'type' => 'string', 'required' => true, 'example' => '5'], ], [ 'name' => 'IsAttachment', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The attachment requirement.', 'enumValueTitles' => ['Y' => 'yes.', 'N' => 'no.'], 'type' => 'string', 'required' => true, 'example' => 'Y', ], ], [ 'name' => 'IsWorkOrderNotify', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'Specifies whether a reminder notification is required.', 'enumValueTitles' => ['Y' => 'yes.', 'N' => 'no.'], 'type' => 'string', 'required' => true, 'example' => 'Y', ], ], [ 'name' => 'NotifyDay', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The number of days in advance to send a reminder notification.', 'type' => 'string', 'required' => false, 'example' => '5'], ], [ 'name' => 'Creator', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The creator of the ticket.', 'type' => 'string', 'required' => true, 'example' => '426556'], ], [ 'name' => 'NotifyId', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The ID of the notification.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '10'], ], [ 'name' => 'IsMilestone', 'in' => 'formData', 'schema' => [ 'description' => 'Specifies whether this is a milestone.', 'enumValueTitles' => ['Y' => 'yes.', 'N' => 'no.'], 'type' => 'string', 'required' => false, 'example' => 'Y', 'title' => '', ], ], [ 'name' => 'Priority', 'in' => 'formData', 'schema' => ['type' => 'integer', 'format' => 'int32', 'description' => '', 'title' => '', 'example' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'Id' => ['title' => '', 'description' => 'The primary key.', 'type' => 'integer', 'format' => 'int64', 'example' => '1978941'], 'CreateTime' => ['title' => '', 'description' => 'The creation time.', 'type' => 'integer', 'format' => 'int64', 'example' => '1734788109000'], 'WorkOrderName' => ['title' => '', 'description' => 'The name of the ticket.', 'type' => 'string', 'example' => '安全月报交付任务'], 'WorkOrderType' => ['title' => '', 'description' => 'The type of the ticket.', 'type' => 'string', 'example' => 'MONTH_REPORT'], 'WorkOrderSource' => ['title' => '', 'description' => 'The source of the ticket.', 'type' => 'string', 'example' => '工单迁移'], 'CustomerId' => ['title' => '', 'description' => 'The ID of the customer.', 'type' => 'string', 'example' => '1477832102462645'], 'StartTime' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'example' => '1734788109000'], 'EndTime' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'example' => '1734788109000'], 'CompleteTime' => ['title' => '', 'description' => 'The completion time.', 'type' => 'integer', 'format' => 'int64', 'example' => '1734788109000'], 'WorkOrderStatus' => ['title' => '', 'description' => 'The status of the ticket.', 'type' => 'string', 'example' => 'UNPROCESSED'], 'OwnerId' => ['title' => '', 'description' => 'The owner.', 'type' => 'string', 'example' => '426556'], 'WorkOrderDetail' => ['title' => '', 'description' => 'The details of the ticket.', 'type' => 'string', 'example' => '{"questionDetail":"测试工单","answerDetail":""}'."\n"], 'Creator' => ['title' => '', 'description' => 'The creator of the ticket.', 'type' => 'string', 'example' => '426556'], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '7DC44321-7AAE-51CD-8E5F-CEB968569042'], 'Code' => ['description' => 'The status code of the operation.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" ."\n" .'- **true**: The call was successful.'."\n" ."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'title' => 'Create a service ticket', 'summary' => 'Creates a service ticket.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'create', 'ramAction' => [ 'action' => 'yundun-mss:CreateServiceWorkOrder', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"Id\\": 1978941,\\n \\"CreateTime\\": 1734788109000,\\n \\"WorkOrderName\\": \\"安全月报交付任务\\",\\n \\"WorkOrderType\\": \\"MONTH_REPORT\\",\\n \\"WorkOrderSource\\": \\"工单迁移\\",\\n \\"CustomerId\\": \\"1477832102462645\\",\\n \\"StartTime\\": 1734788109000,\\n \\"EndTime\\": 1734788109000,\\n \\"CompleteTime\\": 1734788109000,\\n \\"WorkOrderStatus\\": \\"UNPROCESSED\\",\\n \\"OwnerId\\": \\"426556\\",\\n \\"WorkOrderDetail\\": \\"{\\\\\\"questionDetail\\\\\\":\\\\\\"测试工单\\\\\\",\\\\\\"answerDetail\\\\\\":\\\\\\"\\\\\\"}\\\\n\\",\\n \\"Creator\\": \\"426556\\"\\n },\\n \\"RequestId\\": \\"7DC44321-7AAE-51CD-8E5F-CEB968569042\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'DeleteDjbhReport' => [ 'summary' => 'Deletes a classified protection evaluation report.', 'path' => '', 'methods' => ['post'], 'schemes' => ['https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeNodes' => ['FEATUREsos6B7B1Q'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'Id', 'in' => 'formData', 'schema' => ['description' => 'The primary key ID of the report.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '26579', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => '86786E4C-6416-55CF-9AB6-5E275B68801D'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'Successful!', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'string', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"86786E4C-6416-55CF-9AB6-5E275B68801D\\",\\n \\"Code\\": \\"successful\\",\\n \\"Message\\": \\"Successful!\\",\\n \\"HttpStatusCode\\": \\"200\\",\\n \\"Success\\": \\"true\\"\\n}","type":"json"}]', 'title' => 'Delete a classified protection evaluation report', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'delete', 'ramAction' => [ 'action' => 'yundun-mss:DeleteDjbhReport', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'DescribeServiceLinkedRole' => [ 'summary' => 'Queries the service-linked role.', 'methods' => ['post', 'get'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '83735', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'Lang', 'in' => 'query', 'schema' => ['description' => 'The language.', 'type' => 'string', 'required' => false, 'example' => 'zh', 'title' => ''], ], [ 'name' => 'RegionId', 'in' => 'query', 'schema' => ['description' => 'The region ID.', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'type' => 'object', 'properties' => [ 'EntityRoleGrant' => ['description' => 'Indicates whether the service-linked role permission is granted. Valid values:'."\n" .'- true: Granted.'."\n" .'- false: Not granted.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '02F8BBF3-2D61-5982-8911-EEB387BE3AF8', 'title' => ''], ], 'description' => '', 'title' => '', 'example' => '', ], ], ], 'title' => 'Query service-linked role', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:DescribeServiceLinkedRole', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"EntityRoleGrant\\": true,\\n \\"RequestId\\": \\"02F8BBF3-2D61-5982-8911-EEB387BE3AF8\\"\\n}","type":"json"}]', ], 'DisposeServiceWorkOrder' => [ 'summary' => 'Processes a service ticket.', 'methods' => ['get', 'post'], 'schemes' => ['https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'write', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '226218', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'Id', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The ticket ID.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '23172'], ], [ 'name' => 'WorkOrderName', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The ticket name.', 'type' => 'string', 'required' => true, 'example' => '安全产品配置问题与超量提醒'], ], [ 'name' => 'WorkOrderStatus', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The ticket status.', 'enumValueTitles' => ['UNPROCESSED' => 'Pending.', 'PROCESSING' => 'Processing.', 'BACK' => 'Returned.', 'PROCESSED' => 'Processed.', 'INVALID' => 'False positive.', 'IGNORED' => 'Ignored.'], 'type' => 'string', 'required' => false, 'example' => 'PROCESSED', ], ], [ 'name' => 'Operator', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The operator.', 'type' => 'string', 'required' => true, 'example' => '396120'], ], [ 'name' => 'OperateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The operation type.', 'enumValueTitles' => ['SECURITY_CONSULTATION_ANSWERS' => 'Security consultation - answer.', 'CREATE' => 'Create.', 'FIELD_CHANGE' => 'Field change.', 'UPGRADE' => 'Upgrade.', 'PROCESSED' => 'Processed.', 'BACK' => 'Return.', 'FORWARD' => 'Forward.', 'DELAY' => 'Delay.', 'START_PROCESSING' => 'Start processing.'], 'type' => 'string', 'required' => true, 'example' => 'PROCESSED', ], ], [ 'name' => 'OperateRemark', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The operation remarks.', 'type' => 'string', 'required' => true, 'example' => '处理完成'], ], [ 'name' => 'ForwardOwnerId', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The forward recipient.', 'type' => 'string', 'required' => false, 'example' => '405639'], ], [ 'name' => 'UpgradeOwnerId', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The upgrade recipient.', 'type' => 'string', 'required' => false, 'example' => '336333'], ], [ 'name' => 'IsAttachment', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'Specifies whether an attachment is required.', 'enumValueTitles' => ['Y' => 'yes.', 'N' => 'no.'], 'type' => 'string', 'required' => false, 'example' => 'Y', ], ], [ 'name' => 'IsWorkOrderNotify', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The ticket notification.', 'enumValueTitles' => ['Y' => 'yes.', 'N' => 'no.'], 'type' => 'string', 'required' => false, 'example' => 'Y', ], ], [ 'name' => 'AttachmentName', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The attachment name.', 'type' => 'string', 'required' => false, 'example' => 'bbaa133c-0ac2-489f-9fc8-39f91c2e770c_20230301-20240403-服务工单列表.xlsx'], ], [ 'name' => 'StartTime', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1733788109000'], ], [ 'name' => 'EndTime', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1734788109000'], ], [ 'name' => 'NotifyId', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The notification ID.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '10'], ], [ 'name' => 'WorkOrderDetail', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The ticket details.', 'type' => 'string', 'required' => false, 'example' => '{"questionDetail":"测试工单","answerDetail":""}'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'ED520610-6231-5D80-BADD-A8CDC7BBC809'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful.'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"ED520610-6231-5D80-BADD-A8CDC7BBC809\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', 'title' => 'Process a service ticket', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'update', 'ramAction' => [ 'action' => 'yundun-mss:DisposeServiceWorkOrder', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'DisposeWorkTask' => [ 'methods' => ['get', 'post'], 'schemes' => ['https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'write', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '247511', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'Operator', 'in' => 'formData', 'schema' => ['description' => 'The operator.', 'type' => 'string', 'required' => true, 'example' => 'WB01089929', 'title' => ''], ], [ 'name' => 'TaskIds', 'in' => 'formData', 'schema' => ['description' => 'The ticket IDs, separated by commas.', 'type' => 'string', 'required' => true, 'example' => '10310', 'title' => ''], ], [ 'name' => 'Status', 'in' => 'formData', 'schema' => [ 'description' => 'The ticket status.', 'enumValueTitles' => [1 => 'pending.', 'processing.', 'completed.', 'false positive.', 'ignored.', 'under review.', 'reviewed.', 'sending - pending approval.', 'sent.', 'revoking - pending approval.', 'revoked.', 'sending failed - approval rejected.', 'revoking failed - approval rejected.', 'returned.', 'added to whitelist in console.', 'added to whitelist on customer side.', 'sending - process terminated.', 'revoking - process terminated.'], 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '8', 'title' => '', ], ], [ 'name' => 'OptRemark', 'in' => 'formData', 'schema' => ['description' => 'The operation remarks.', 'type' => 'string', 'required' => true, 'example' => '处理完成', 'title' => ''], ], [ 'name' => 'WorkTaskAnalysisResults', 'in' => 'formData', 'style' => 'json', 'schema' => [ 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ 'TaskId' => ['type' => 'integer', 'format' => 'int64', 'example' => '1445078', 'description' => '', 'title' => ''], 'AnalysisResult' => ['type' => 'string', 'example' => '您好， 根据您提供的告警详情，xxx', 'description' => '', 'title' => ''], ], 'description' => '', 'title' => '', 'example' => '', ], 'description' => '', 'title' => '', 'example' => '', ], ], [ 'name' => 'SyncSasDeal', 'in' => 'formData', 'schema' => ['type' => 'integer', 'format' => 'int32', 'example' => '0', 'description' => '', 'title' => ''], ], [ 'name' => 'SyncWafApisecDeal', 'in' => 'formData', 'schema' => ['type' => 'integer', 'format' => 'int32', 'example' => '0', 'description' => '', 'title' => ''], ], [ 'name' => 'SyncSasSiemEventDeal', 'in' => 'formData', 'schema' => ['type' => 'integer', 'format' => 'int32', 'example' => '0', 'description' => '', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '86786E4C-6416-55CF-9AB6-5E275B68801D'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'Success.', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful.'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], 'title' => 'Process alert tickets', 'summary' => 'Processes alert tickets.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'update', 'ramAction' => [ 'action' => 'yundun-mss:DisposeWorkTask', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"86786E4C-6416-55CF-9AB6-5E275B68801D\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"Success.\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetAlarmDetailById' => [ 'summary' => 'Queries the details of an alert.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'abilityTreeCode' => '179907', 'abilityTreeNodes' => ['FEATUREsos0FVTHS'], ], 'parameters' => [ [ 'name' => 'Id', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The primary key ID.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '20077761'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'EventDetails' => [ 'title' => '', 'description' => 'The event details.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'NameDisplay' => ['title' => '', 'description' => 'The display name of the alert event.', 'type' => 'string', 'example' => 'Login with unusual location'], 'ValueDisplay' => ['title' => '', 'description' => 'The path where the alert event occurred.', 'type' => 'string', 'example' => '/etc/crontab'], 'Type' => ['title' => '', 'description' => 'The event type of the alerting event.', 'type' => 'string', 'example' => 'text'], 'Value' => ['title' => '', 'description' => 'The path where the alert event occurred.', 'type' => 'string', 'example' => '/etc/crontab'], ], 'title' => '', 'example' => '', ], 'example' => '', ], 'Desc' => ['title' => '', 'description' => 'The description.', 'type' => 'string', 'example' => 'webshell'], 'TacticDisplayName' => ['title' => '', 'description' => 'The ATT&CK tactic name.', 'type' => 'string', 'example' => 'Malicious scripts-Malicious script code execution'], 'AlarmEventTypeDisplay' => ['title' => '', 'description' => 'The alerting event type.', 'type' => 'string', 'example' => 'Login with unusual location'], 'ContainHwMode' => ['title' => '', 'description' => 'Indicates whether critical event protection mode is enabled. Valid values:'."\n" ."\n" .'- true: Enabled.'."\n" .'- false: Not enabled.', 'type' => 'boolean', 'example' => 'false'], 'AlarmId' => ['title' => '', 'description' => 'The alert ID.', 'type' => 'integer', 'format' => 'int64', 'example' => '202427220'], 'AlarmSource' => ['title' => '', 'description' => 'The alert source.', 'type' => 'string', 'example' => 'SUSP_EVENT'], 'AlarmName' => ['title' => '', 'description' => 'The alert name.', 'type' => 'string', 'example' => '负载均衡可挂载服务器数量告警'], 'AlarmTime' => ['title' => '', 'description' => 'The most recent alert time.', 'type' => 'string', 'example' => '2018-09-26 01:51:01'], 'DealTime' => ['title' => '', 'description' => 'The time when the alert was handled.', 'type' => 'string', 'example' => '2018-09-26 01:51:01'], 'Status' => ['title' => '', 'description' => 'The handling status.', 'type' => 'string', 'example' => '要查询的告警事件状态。取值：'."\n" ."\n" .'0：全部'."\n" .'1：待处理'."\n" .'2：已忽略'."\n" .'4：已确认'."\n" .'8：已标记为误报'."\n" .'16：处理中'."\n" .'32：处理完毕'."\n" .'64：已经过期'."\n" .'128：已经删除'."\n" .'512：自动拦截中'."\n" .'513：自动拦截完毕'], 'OwnerId' => ['title' => '', 'description' => 'The owner.', 'type' => 'string', 'example' => '324546'], 'Remark' => ['title' => '', 'description' => 'The handling method.', 'type' => 'string', 'example' => '192.168.XX.XX'], 'InstanceName' => ['title' => '', 'description' => 'The affected asset.', 'type' => 'string', 'example' => 'nginx'], 'EventLevel' => ['title' => '', 'description' => 'The alert level.', 'type' => 'string', 'example' => 'suspicious'], 'OccurrenceTime' => ['title' => '', 'description' => 'The time when the alert first occurred.', 'type' => 'string', 'example' => '2018-09-26 01:51:01'], 'InternetIp' => ['title' => '', 'description' => 'The public IP address.', 'type' => 'string', 'example' => '47.116.126.79'], 'IntranetIp' => ['title' => '', 'description' => 'The internal IP address.', 'type' => 'string', 'example' => '172.19.195.176'], 'Id' => ['title' => '', 'description' => 'The primary key ID of the ticket.', 'type' => 'integer', 'format' => 'int64', 'example' => '9772'], 'AlarmEventType' => ['title' => '', 'description' => 'The alerting event type.', 'type' => 'string', 'example' => 'Unusual Logon'], 'AnalysisResult' => ['title' => '', 'description' => 'The analysis process.', 'type' => 'string', 'example' => '[{"value":"服务器可能已被黑客攻击，存在恶意进程在运行。 分析过程：告警显示，服务端存在一个名为”dns.exe”的进程在访问”polling.burpcollaborator.net”，这是一个被黑名单列出的恶意域名。在正常情况下,”dns.exe”不应该单独存在于系统的路径下，并且也不应该访问这类恶意域名。因此，这个进程可能是黑客留下的恶意进程。","key":"结论"},{"value":"尽快对服务器进行全面扫描，清除恶意进程。同时，联系网络安全专家进行深入调查，以确定是否有其他潜在的安全威胁。","key":"处置建议"}]'], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '5C1B0668-442C-57AE-9668-D894B0B012EB'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The returned message.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the operation was successful. Valid values:'."\n" ."\n" .'- true: Successful.'."\n" .'- false: Failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'title' => 'Query alert details', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetAlarmDetailById', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"EventDetails\\": [\\n {\\n \\"NameDisplay\\": \\"Login with unusual location\\",\\n \\"ValueDisplay\\": \\"/etc/crontab\\",\\n \\"Type\\": \\"text\\",\\n \\"Value\\": \\"/etc/crontab\\"\\n }\\n ],\\n \\"Desc\\": \\"webshell\\",\\n \\"TacticDisplayName\\": \\"Malicious scripts-Malicious script code execution\\",\\n \\"AlarmEventTypeDisplay\\": \\"Login with unusual location\\",\\n \\"ContainHwMode\\": false,\\n \\"AlarmId\\": 202427220,\\n \\"AlarmSource\\": \\"SUSP_EVENT\\",\\n \\"AlarmName\\": \\"负载均衡可挂载服务器数量告警\\",\\n \\"AlarmTime\\": \\"2018-09-26 01:51:01\\",\\n \\"DealTime\\": \\"2018-09-26 01:51:01\\",\\n \\"Status\\": \\"要查询的告警事件状态。取值：\\\\n\\\\n0：全部\\\\n1：待处理\\\\n2：已忽略\\\\n4：已确认\\\\n8：已标记为误报\\\\n16：处理中\\\\n32：处理完毕\\\\n64：已经过期\\\\n128：已经删除\\\\n512：自动拦截中\\\\n513：自动拦截完毕\\",\\n \\"OwnerId\\": \\"324546\\",\\n \\"Remark\\": \\"192.168.XX.XX\\",\\n \\"InstanceName\\": \\"nginx\\",\\n \\"EventLevel\\": \\"suspicious\\",\\n \\"OccurrenceTime\\": \\"2018-09-26 01:51:01\\",\\n \\"InternetIp\\": \\"47.116.126.79\\",\\n \\"IntranetIp\\": \\"172.19.195.176\\",\\n \\"Id\\": 9772,\\n \\"AlarmEventType\\": \\"Unusual Logon\\",\\n \\"AnalysisResult\\": \\"[{\\\\\\"value\\\\\\":\\\\\\"服务器可能已被黑客攻击，存在恶意进程在运行。 分析过程：告警显示，服务端存在一个名为”dns.exe”的进程在访问”polling.burpcollaborator.net”，这是一个被黑名单列出的恶意域名。在正常情况下,”dns.exe”不应该单独存在于系统的路径下，并且也不应该访问这类恶意域名。因此，这个进程可能是黑客留下的恶意进程。\\\\\\",\\\\\\"key\\\\\\":\\\\\\"结论\\\\\\"},{\\\\\\"value\\\\\\":\\\\\\"尽快对服务器进行全面扫描，清除恶意进程。同时，联系网络安全专家进行深入调查，以确定是否有其他潜在的安全威胁。\\\\\\",\\\\\\"key\\\\\\":\\\\\\"处置建议\\\\\\"}]\\"\\n },\\n \\"RequestId\\": \\"5C1B0668-442C-57AE-9668-D894B0B012EB\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetAttackedAssetDeal' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179684', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The time filter type. You can filter by the last 7 days, last 30 days, last half year, or a custom time range.', 'enumValueTitles' => ['oneYear' => 'last year.', 'month' => 'last month.', 'halfYear' => 'last half year.', 'customize' => 'custom.'], 'type' => 'string', 'required' => true, 'example' => 'month', ], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732268720000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732268720000'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The source of the alert event.', 'type' => 'string', 'required' => false, 'example' => '暂时无需传参，有问题请联系管理员'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data query result.', 'type' => 'object', 'properties' => [ 'EcsTrendList' => [ 'title' => '', 'description' => 'The convergence trend list of attacked assets.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Date' => ['title' => '', 'description' => 'The time point.', 'type' => 'string', 'example' => '202312或20231205'], 'DealCount' => ['title' => '', 'description' => 'The number of handled items.', 'type' => 'integer', 'format' => 'int64', 'example' => '2'], 'FindCount' => ['title' => '', 'description' => 'The number of discovered items.', 'type' => 'integer', 'format' => 'int64', 'example' => '暂时无值，有疑问请联系管理员'], ], 'title' => '', 'example' => '', ], 'example' => '', ], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '1E74F11C-B4A8-5774-962C-02003BA8504E'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The response message.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the query was successful.
'."\n" .'**Valid values:**'."\n" .'* true: Successful.'."\n" .'* false: Failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Attacked asset convergence trend', 'summary' => 'Queries the convergence trend of attacked assets.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetAttackedAssetDeal', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"EcsTrendList\\": [\\n {\\n \\"Date\\": \\"202312或20231205\\",\\n \\"DealCount\\": 2,\\n \\"FindCount\\": 0\\n }\\n ]\\n },\\n \\"RequestId\\": \\"1E74F11C-B4A8-5774-962C-02003BA8504E\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetBaselineSummary' => [ 'summary' => 'Queries the compliance risk convergence trend.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179683', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The time filter type. Supports filtering by last 7 days, last 30 days, last half year, or custom time range.', 'enumValueTitles' => ['oneYear' => 'last year.', 'month' => 'last 30 days.', 'halfYear' => 'last half year.', 'customize' => 'custom.'], 'type' => 'string', 'required' => true, 'example' => 'month', ], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1729478485000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732156885986'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The alert event source.', 'type' => 'string', 'required' => false, 'example' => '该字段暂未使用，有问题请联系管理员'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'TrendDTOList' => [ 'description' => 'The collection of baseline statistics.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Date' => ['title' => '', 'description' => 'The time point.', 'type' => 'string', 'example' => '202408或者20240801'], 'DealCount' => ['title' => '', 'description' => 'The number of handled items.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'FindCount' => ['title' => '', 'description' => 'The number of discovered items.', 'type' => 'integer', 'format' => 'int64', 'example' => '12'], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '67D61738-5E38-5164-947A-34E3850D493A'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the operation was successful. Valid values:'."\n" .'- true: Successful.'."\n" .'- false: Failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Compliance risk convergence trend', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetBaselineSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"TrendDTOList\\": [\\n {\\n \\"Date\\": \\"202408或者20240801\\",\\n \\"DealCount\\": 10,\\n \\"FindCount\\": 12\\n }\\n ]\\n },\\n \\"RequestId\\": \\"67D61738-5E38-5164-947A-34E3850D493A\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetConsoleScore' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '215083', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'Filter time type. Supports filtering by the last 7 days, last 30 days, last half year, custom, and other methods. An empty value indicates the last 7 days.', 'enumValueTitles' => ['oneYear' => 'Last year', 'month' => 'Last 30 days', 'halfYear' => 'Last half year', 'customize' => 'Custom'], 'type' => 'string', 'required' => true, 'example' => 'month', ], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'Start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1729478485000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'End time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732156885986'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'Alert event source.', 'type' => 'string', 'required' => false, 'example' => '该字段暂未使用，有问题请联系管理员'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'Request response.', 'type' => 'object', 'properties' => [ 'Data' => ['description' => 'The data returned by the API.', 'type' => 'any', 'example' => '{'."\n" .' "score": "94.00",'."\n" .' "consoleScoreTrendDTOS": ['."\n" .' {'."\n" .' "date": "20241009",'."\n" .' "score": "100.0"'."\n" .' }'."\n" .' ],'."\n" .' "cyclicYearOverYear": "-6.00",'."\n" .' "recordDate": "20241209",'."\n" .' "weeklyYearOverYear": "1.62",'."\n" .' "aboveWholeNetworkUserRatio": "6.25",'."\n" .' "aliUid": "1601097845544644",'."\n" .' "detailJson": "[{\\"detailDTO\\":[{\\"count\\":0,\\"itemName\\":\\"应用漏洞POC验证\\",\\"mark\\":\\"1\\"},{\\"count\\":0,\\"itemName\\":\\"未授权访问漏洞（公网暴露）\\",\\"mark\\":\\"1\\"},{\\"count\\":0,\\"itemName\\":\\"后台弱口令漏洞（公网暴露）\\",\\"mark\\":\\"1\\"},{\\"count\\":0,\\"itemName\\":\\"文件上传漏洞（公网暴露）\\",\\"mark\\":\\"1\\"}],\\"markRate\\":\\"0.5\\",\\"markType\\":\\"vul\\"},{\\"detailDTO\\":[{\\"count\\":12,\\"itemName\\":\\"WAF3.0回源配置不正确\\",\\"mark\\":\\"1\\"},{\\"count\\":0,\\"itemName\\":\\"AK泄露检查未开启\\",\\"mark\\":\\"1\\"},{\\"count\\":0,\\"itemName\\":\\"DNAT管理端口开放\\",\\"mark\\":\\"1\\"},{\\"count\\":0,\\"itemName\\":\\"高危端口暴露\\",\\"mark\\":\\"0.5\\"}],\\"markRate\\":\\"0.5\\",\\"markType\\":\\"risk\\"}]"'."\n" .'}', 'title' => ''], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'D0937B0F-9180-5F70-B6ED-0BA22591627F'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'Success', 'title' => ''], 'Message' => ['description' => 'The message returned.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the operation is successful. A value of true indicates success. A value of false indicates failure.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'errorCodes' => [ 401 => [ ['errorCode' => 'ConsoleScoreEmpty', 'errorMessage' => 'get score data is empty.', 'description' => ''], ], ], 'title' => 'Get Console Score', 'summary' => 'Get Console Score.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetConsoleScore', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": \\"{\\\\n \\\\\\"score\\\\\\": \\\\\\"94.00\\\\\\",\\\\n \\\\\\"consoleScoreTrendDTOS\\\\\\": [\\\\n {\\\\n \\\\\\"date\\\\\\": \\\\\\"20241009\\\\\\",\\\\n \\\\\\"score\\\\\\": \\\\\\"100.0\\\\\\"\\\\n }\\\\n ],\\\\n \\\\\\"cyclicYearOverYear\\\\\\": \\\\\\"-6.00\\\\\\",\\\\n \\\\\\"recordDate\\\\\\": \\\\\\"20241209\\\\\\",\\\\n \\\\\\"weeklyYearOverYear\\\\\\": \\\\\\"1.62\\\\\\",\\\\n \\\\\\"aboveWholeNetworkUserRatio\\\\\\": \\\\\\"6.25\\\\\\",\\\\n \\\\\\"aliUid\\\\\\": \\\\\\"1601097845544644\\\\\\",\\\\n \\\\\\"detailJson\\\\\\": \\\\\\"[{\\\\\\\\\\\\\\"detailDTO\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"应用漏洞POC验证\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"1\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"未授权访问漏洞（公网暴露）\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"1\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"后台弱口令漏洞（公网暴露）\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"1\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"文件上传漏洞（公网暴露）\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"1\\\\\\\\\\\\\\"}],\\\\\\\\\\\\\\"markRate\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"0.5\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"markType\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"vul\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\"detailDTO\\\\\\\\\\\\\\":[{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":12,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"WAF3.0回源配置不正确\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"1\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"AK泄露检查未开启\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"1\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"DNAT管理端口开放\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"1\\\\\\\\\\\\\\"},{\\\\\\\\\\\\\\"count\\\\\\\\\\\\\\":0,\\\\\\\\\\\\\\"itemName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"高危端口暴露\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mark\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"0.5\\\\\\\\\\\\\\"}],\\\\\\\\\\\\\\"markRate\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"0.5\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"markType\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"risk\\\\\\\\\\\\\\"}]\\\\\\"\\\\n}\\",\\n \\"RequestId\\": \\"D0937B0F-9180-5F70-B6ED-0BA22591627F\\",\\n \\"Code\\": \\"Success\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetDetailById' => [ 'summary' => 'Queries risk details.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179782', 'abilityTreeNodes' => ['FEATUREsosYT8XCW'], ], 'parameters' => [ [ 'name' => 'Id', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The primary key ID.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '22'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data query result.', 'type' => 'object', 'properties' => [ 'VulDetails' => [ 'title' => '', 'description' => 'The vulnerability details.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'CveId' => ['title' => '', 'description' => 'The CVE ID.', 'type' => 'string', 'example' => 'CVE-2022-21291'], 'CvssScore' => ['title' => '', 'description' => 'The CVSS score of the vulnerability in the Alibaba Cloud vulnerability database.', 'type' => 'string', 'example' => '10.0'], 'Title' => ['title' => '', 'description' => 'The title of the vulnerability advisory.', 'type' => 'string', 'example' => 'Chanjet T-Plus SetupAccount/Upload. Aspx file upload vulnerability(CNVD-2022-60632)'], 'FixSuggestion' => ['title' => '', 'description' => 'The remediation suggestion.', 'type' => 'string', 'example' => 'https://avd.aliyun.com/detail/CVE-2022-21291'], ], 'title' => '', 'example' => '', ], 'example' => '', ], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'DAB46EC5-3746-59C4-B6D2-469F442EC73F'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '404', 'title' => ''], 'Message' => ['description' => 'The response message.', 'type' => 'string', 'example' => 'success', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'title' => 'Query risk details', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetDetailById', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"VulDetails\\": [\\n {\\n \\"CveId\\": \\"CVE-2022-21291\\",\\n \\"CvssScore\\": \\"10.0\\",\\n \\"Title\\": \\"Chanjet T-Plus SetupAccount/Upload. Aspx file upload vulnerability(CNVD-2022-60632)\\",\\n \\"FixSuggestion\\": \\"https://avd.aliyun.com/detail/CVE-2022-21291\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"DAB46EC5-3746-59C4-B6D2-469F442EC73F\\",\\n \\"Code\\": \\"404\\",\\n \\"Message\\": \\"success\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetDocumentDownloadUrl' => [ 'summary' => 'Downloads a single service report.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '185959', 'abilityTreeNodes' => ['FEATUREsosOEHKXE'], 'autoTest' => true, 'tenantRelevance' => 'tenant', ], 'parameters' => [ [ 'name' => 'Id', 'in' => 'formData', 'schema' => ['description' => 'The document management ID.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '175815', 'title' => ''], ], [ 'name' => 'ReportType', 'in' => 'formData', 'schema' => [ 'description' => 'The report type.', 'enumValueTitles' => [1 => 'Security service.', 'Emergency response.', 'Risk assessment.', 'Vulnerability scan.', 'Classified protection assessment.', 'SOS classified protection assessment.'], 'type' => 'string', 'required' => false, 'example' => '1', 'title' => '', ], ], [ 'name' => 'FileKey', 'in' => 'formData', 'schema' => ['type' => 'string', 'description' => '', 'title' => '', 'example' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => ['description' => 'The OSS file access URL.', 'type' => 'string', 'example' => 'https://oos-cn.ctyunapi.cn/example-bucket/test/1.jpg', 'title' => ''], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'C7BE80B4-7692-54FA-AB22-2A7DF08C4754'], 'Code' => ['description' => 'The API status code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Download a single service report', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetDocumentDownloadUrl', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": \\"https://oos-cn.ctyunapi.cn/example-bucket/test/1.jpg\\",\\n \\"RequestId\\": \\"C7BE80B4-7692-54FA-AB22-2A7DF08C4754\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetDocumentPage' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '185960', 'abilityTreeNodes' => ['FEATUREsosOEHKXE'], 'autoTest' => true, 'tenantRelevance' => 'tenant', ], 'parameters' => [ [ 'name' => 'CurrentPage', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The current page number.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '1'], ], [ 'name' => 'PageSize', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '20'], ], [ 'name' => 'ReportType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The report type. Valid values:'."\n" .'- 1: security service'."\n" .'- 2: emergency response'."\n" .'- 3: risk assessment'."\n" .'- 4: vulnerability scan'."\n" .'- 5: classified protection assessment.', 'enumValueTitles' => [1 => 'Security service.', 'Emergency response.', 'Risk assessment.', 'Vulnerability scan.', 'Classified protection assessment.'], 'type' => 'string', 'required' => true, 'example' => '1', ], ], [ 'name' => 'DocumentName', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The document name.', 'type' => 'string', 'required' => false, 'example' => '季度报告'], ], [ 'name' => 'DeliveredBy', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The person who delivered the report.', 'type' => 'string', 'required' => false, 'example' => '张三'], ], [ 'name' => 'DocumentType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The document type. Valid values:'."\n" .'- 0: daily report'."\n" .'- 1: weekly report'."\n" .'- 2: monthly report'."\n" .'- 3: quarterly summary report'."\n" .'- 4: annual summary report'."\n" .'- 5: service summary report'."\n" .'- 6: emergency response report'."\n" .'- 7: vulnerability scan report'."\n" .'- 8: risk assessment report'."\n" .'- 9: other report'."\n" .'- 10: meeting report'."\n" .'- 15: classified protection assessment report.', 'enumValueTitles' => ['Daily report.', 'Weekly report.', 'Monthly report.', 'Quarterly summary report.', 'Annual summary report.', 'Service summary report.', 'Emergency response report.', 'Vulnerability scan report.', 'Risk assessment report.', 'Other report.', 'Meeting report.', 15 => 'Classified protection assessment report.'], 'type' => 'string', 'required' => false, 'example' => '0', ], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'PageInfo' => [ 'description' => 'The pagination information.', 'type' => 'object', 'properties' => [ 'CurrentPage' => ['description' => 'The page number of the current page in a paging query.', 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => ''], 'PageSize' => ['description' => 'The number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'example' => '10', 'title' => ''], 'TotalCount' => ['description' => 'The total number of entries returned.', 'type' => 'integer', 'format' => 'int32', 'example' => '3149', 'title' => ''], ], 'title' => '', 'example' => '', ], 'Data' => [ 'description' => 'The response data.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Id' => ['title' => '', 'description' => 'The primary key ID of the document.', 'type' => 'integer', 'format' => 'int64', 'example' => '346409'], 'DocumentType' => ['title' => '', 'description' => 'The service report type.', 'type' => 'string', 'example' => '3'], 'DeliveredBy' => ['title' => '', 'description' => 'The person who delivered the report.', 'type' => 'string', 'example' => '张三'], 'UploadTime' => ['title' => '', 'description' => 'The time when the report was generated.', 'type' => 'string', 'example' => '2023-03-21 17:26:34'], 'DocumentName' => ['title' => '', 'description' => 'The report name.', 'type' => 'string', 'example' => '季度报告'], 'ReportStatus' => [ 'description' => 'The report status. Valid values:'."\n" .'- userConfirmed: Archived.'."\n" .'- uploaded: Pending user review.', 'enumValueTitles' => ['userConfirmed' => 'Archived.', 'uploaded' => 'Pending user review.'], 'type' => 'string', 'example' => 'uploaded', 'title' => '', ], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '04DAD7B4-E1DA-5C2C-8E5C-A1EDC880CF60'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned with the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Query service reports', 'summary' => 'Queries service reports.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetDocumentPage', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"PageInfo\\": {\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 3149\\n },\\n \\"Data\\": [\\n {\\n \\"Id\\": 346409,\\n \\"DocumentType\\": \\"3\\",\\n \\"DeliveredBy\\": \\"张三\\",\\n \\"UploadTime\\": \\"2023-03-21 17:26:34\\",\\n \\"DocumentName\\": \\"季度报告\\",\\n \\"ReportStatus\\": \\"uploaded\\"\\n }\\n ],\\n \\"RequestId\\": \\"04DAD7B4-E1DA-5C2C-8E5C-A1EDC880CF60\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetDocumentSummary' => [ 'summary' => 'Retrieves the statistics on the homepage of a service report.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179771', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'ReportType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The type of the service report.', 'enumValueTitles' => [1 => 'Security service.', 'Emergency response.', 'Risk assessment.', 'Vulnerability scanning.', 'Classified protection assessment.'], 'type' => 'string', 'required' => false, 'example' => '1', ], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data query result.', 'type' => 'object', 'properties' => [ 'Frequency' => ['title' => '', 'description' => 'The number of service sessions or days.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'DocumentCount' => ['title' => '', 'description' => 'The number of documents.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '7903F2DE-D9EE-5D16-8A08-E9223E54B281'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned with the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'True', 'title' => ''], ], 'example' => '', ], ], ], 'title' => 'Retrieve service report homepage statistics', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetDocumentSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"Frequency\\": 10,\\n \\"DocumentCount\\": 10\\n },\\n \\"RequestId\\": \\"7903F2DE-D9EE-5D16-8A08-E9223E54B281\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetRecentDocument' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179682', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The time filter type. Supports filtering by the last 7 days, last 30 days, last 6 months, or a custom time range.', 'type' => 'string', 'required' => true, 'example' => '该字段暂未使用，有问题请联系管理员'], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1724788109000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1734788109000'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The alert event source.', 'type' => 'string', 'required' => false, 'example' => '该字段暂未使用，有问题请联系管理员'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Name' => ['title' => '', 'description' => 'The document name.', 'type' => 'string', 'example' => '文档名称测试'], 'Id' => ['title' => '', 'description' => 'The primary key ID.', 'type' => 'integer', 'format' => 'int64', 'example' => '360491'], 'UploadTime' => ['title' => '', 'description' => 'The upload time.', 'type' => 'string', 'example' => '2023-03-20 14:30:38'], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '4916FA8D-F294-518D-B373-8B59D63CAB19'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The response message.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Retrieve the most recently uploaded service reports', 'summary' => 'Retrieves the most recently uploaded service reports.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetRecentDocument', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": [\\n {\\n \\"Name\\": \\"文档名称测试\\",\\n \\"Id\\": 360491,\\n \\"UploadTime\\": \\"2023-03-20 14:30:38\\"\\n }\\n ],\\n \\"RequestId\\": \\"4916FA8D-F294-518D-B373-8B59D63CAB19\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetSafetyCover' => [ 'summary' => 'Retrieves the security protection coverage.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179686', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The time filter type. Supports filtering by last 7 days, last 30 days, last half year, or custom time range.', 'type' => 'string', 'required' => true, 'example' => 'month'], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732255620000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732268720000'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The alert event source.', 'type' => 'string', 'required' => false, 'example' => '该接口不用传'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The query result.', 'type' => 'object', 'properties' => [ 'WafProtection' => [ 'title' => '', 'description' => 'The WAF protection coverage.', 'type' => 'object', 'properties' => [ 'ProtectionCount' => ['title' => '', 'description' => 'The number of protected assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'NoProtectionCount' => ['title' => '', 'description' => 'The number of unprotected assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'TotalCount' => ['title' => '', 'description' => 'The total number of assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'ProtectionRate' => ['title' => '', 'description' => 'The protection rate.', 'type' => 'string', 'example' => '50.00'], 'ProtectionGrowthRate' => ['title' => '', 'description' => 'The year-over-year growth rate of the protection rate.', 'type' => 'string', 'example' => '35.00'], ], 'example' => '', ], 'EcsProtection' => [ 'title' => '', 'description' => 'The ECS protection coverage.', 'type' => 'object', 'properties' => [ 'ProtectionCount' => ['title' => '', 'description' => 'The number of protected assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'NoProtectionCount' => ['title' => '', 'description' => 'The number of unprotected assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'TotalCount' => ['title' => '', 'description' => 'The total number of assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'ProtectionRate' => ['title' => '', 'description' => 'The protection rate.', 'type' => 'string', 'example' => '50.00'], 'ProtectionGrowthRate' => ['title' => '', 'description' => 'The year-over-year growth rate of the protection rate.', 'type' => 'string', 'example' => '35.00'], ], 'example' => '', ], 'CfwProtection' => [ 'title' => '', 'description' => 'The Cloud Firewall (CFW) protection coverage.', 'type' => 'object', 'properties' => [ 'ProtectionCount' => ['title' => '', 'description' => 'The number of protected assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'NoProtectionCount' => ['title' => '', 'description' => 'The number of unprotected assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'TotalCount' => ['title' => '', 'description' => 'The total number of assets.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'ProtectionRate' => ['title' => '', 'description' => 'The protection rate.', 'type' => 'string', 'example' => '50.00'], 'ProtectionGrowthRate' => ['title' => '', 'description' => 'The year-over-year growth rate of the protection rate.', 'type' => 'string', 'example' => '35.00'], ], 'example' => '', ], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '564f8bb9-df3c-42a0-877a-b35d48f66603'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '404', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'system error', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'True', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Retrieve security protection coverage', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetSafetyCover', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"WafProtection\\": {\\n \\"ProtectionCount\\": 5,\\n \\"NoProtectionCount\\": 5,\\n \\"TotalCount\\": 10,\\n \\"ProtectionRate\\": \\"50.00\\",\\n \\"ProtectionGrowthRate\\": \\"35.00\\"\\n },\\n \\"EcsProtection\\": {\\n \\"ProtectionCount\\": 5,\\n \\"NoProtectionCount\\": 5,\\n \\"TotalCount\\": 10,\\n \\"ProtectionRate\\": \\"50.00\\",\\n \\"ProtectionGrowthRate\\": \\"35.00\\"\\n },\\n \\"CfwProtection\\": {\\n \\"ProtectionCount\\": 5,\\n \\"NoProtectionCount\\": 5,\\n \\"TotalCount\\": 10,\\n \\"ProtectionRate\\": \\"50.00\\",\\n \\"ProtectionGrowthRate\\": \\"35.00\\"\\n }\\n },\\n \\"RequestId\\": \\"564f8bb9-df3c-42a0-877a-b35d48f66603\\",\\n \\"Code\\": \\"404\\",\\n \\"Message\\": \\"system error\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetSowList' => [ 'summary' => 'Retrieves the SOW list.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'abilityTreeCode' => '212416', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The time filter type. Supports filtering by last 7 days, last 30 days, last half year, or custom time range.', 'enumValueTitles' => ['oneYear' => 'last year.', 'month' => 'last 30 days.', 'halfYear' => 'last half year.', 'customize' => 'custom.'], 'type' => 'string', 'required' => true, 'example' => 'month', ], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1729478485000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732156885986'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The alert event source.', 'type' => 'string', 'required' => false, 'example' => '该字段暂未使用，有问题请联系管理员'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'TaskTypeName' => ['title' => '', 'description' => 'The task type.', 'type' => 'string', 'example' => '安全风险评估'], 'StartTime' => ['title' => '', 'description' => 'The start time.', 'type' => 'string', 'example' => '2023-03-24 16:51:26'], 'CompleteTime' => ['title' => '', 'description' => 'The completion time.', 'type' => 'string', 'example' => '2024-03-28 16:19:35'], 'Progress' => [ 'title' => '', 'description' => 'The progress. Valid values:'."\n" .'- COMPLETED: Completed.'."\n" .'- IN_PROCESS: In progress.'."\n" .'- IN_PREPARATION: In preparation.', 'enumValueTitles' => ['COMPLETED' => 'Completed.', 'IN_PROCESS' => 'In progress.', 'IN_PREPARATION' => 'In preparation.'], 'type' => 'string', 'example' => 'IN_PREPARATION', ], 'RecordCount' => ['title' => '', 'description' => 'The number of records.', 'type' => 'integer', 'format' => 'int32', 'example' => '173'], 'WorkOrderName' => ['title' => '', 'description' => 'The ticket name.', 'type' => 'string', 'example' => '安全产品配置问题与超量提醒'], 'OperateRemark' => ['title' => '', 'description' => 'The operation remarks.', 'type' => 'string', 'example' => '新建'], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'FA8883BC-CB18-5E28-A113-8249917CA05E'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'Success', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'title' => 'Retrieve SOW list', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSowList', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": [\\n {\\n \\"TaskTypeName\\": \\"安全风险评估\\",\\n \\"StartTime\\": \\"2023-03-24 16:51:26\\",\\n \\"CompleteTime\\": \\"2024-03-28 16:19:35\\",\\n \\"Progress\\": \\"IN_PREPARATION\\",\\n \\"RecordCount\\": 173,\\n \\"WorkOrderName\\": \\"安全产品配置问题与超量提醒\\",\\n \\"OperateRemark\\": \\"新建\\"\\n }\\n ],\\n \\"RequestId\\": \\"FA8883BC-CB18-5E28-A113-8249917CA05E\\",\\n \\"Code\\": \\"Success\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetSuspEventPage' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '185961', 'abilityTreeNodes' => ['FEATUREsos0FVTHS'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'CurrentPage', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The current page number.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '1'], ], [ 'name' => 'PageSize', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '10'], ], [ 'name' => 'Source', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The alert source.', 'enumValueTitles' => ['SYSTEM_SECURITY_EVENT' => 'Legacy data source of Security Center alerts.', 'SUSP_CUSTOM_WAF' => 'MDR_WAF event.', 'SUSP_EVENT' => 'Security Center.', 'SUSP_CUSTOM_DDOS' => 'MDR_DDOS event.', 'SUSP_CUSTOM_CFW' => 'MDR_CFW event.'], 'type' => 'string', 'required' => false, 'example' => 'SUSP_EVENT', ], ], [ 'name' => 'Status', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The handling status.', 'enumValueTitles' => [1 => 'pending.', 'processing.', 'completed.', 'false positive.', 'ignored.', 15 => 'whitelisted in the console.', 'whitelisted on the customer side.'], 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1', ], ], [ 'name' => 'AlarmStartTime', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time of the alert.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1722515522000'], ], [ 'name' => 'AlarmEndTime', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time of the alert.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1732515522000'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'PageInfo' => [ 'description' => 'The pagination information.', 'type' => 'object', 'properties' => [ 'CurrentPage' => ['description' => 'The page number of the current page in a paging query.', 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => ''], 'PageSize' => ['description' => 'The number of entries per page in the returned data.', 'type' => 'integer', 'format' => 'int32', 'example' => '10', 'title' => ''], 'TotalCount' => ['description' => 'The total number of entries in the query result.', 'type' => 'integer', 'format' => 'int32', 'example' => '100', 'title' => ''], ], 'title' => '', 'example' => '', ], 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'AlarmId' => ['title' => '', 'description' => 'The alert ID.', 'type' => 'integer', 'format' => 'int64', 'example' => '5b1eeebe4f22daa2b177298234214fa3'], 'AlarmSource' => ['title' => '', 'description' => 'The alert source.', 'type' => 'string', 'example' => 'SUSP_EVENT'], 'AlarmName' => ['title' => '', 'description' => 'The alert name.', 'type' => 'string', 'example' => 'Web服务漏洞利用'], 'AlarmTime' => ['title' => '', 'description' => 'The most recent alert time.', 'type' => 'string', 'example' => '1722515522000'."\n"], 'DealTime' => ['title' => '', 'description' => 'The time when the alert was handled.', 'type' => 'string', 'example' => '1732515522000'."\n"], 'Status' => [ 'title' => '', 'description' => 'The handling status.', 'enumValueTitles' => [1 => 'Unhandled.', 'processing.', 'Handled.', 'Handled.', 'Handled.', 15 => 'Handled.', 'Handled.'], 'type' => 'string', 'example' => '未处理', ], 'OwnerId' => ['title' => '', 'description' => 'The owner.', 'type' => 'string', 'example' => '张三'], 'Remark' => ['title' => '', 'description' => 'The handling method.', 'type' => 'string', 'example' => '处理完成'], 'InstanceName' => ['title' => '', 'description' => 'The affected asset.', 'type' => 'string', 'example' => 'shells-azhou'], 'EventLevel' => [ 'title' => '', 'description' => 'The alert level.', 'enumValueTitles' => ['serious' => 'Critical.', 'suspicious' => 'Suspicious.', 'remind' => 'Reminder.'], 'type' => 'string', 'example' => 'suspicious', ], 'OccurrenceTime' => ['title' => '', 'description' => 'The time of the first occurrence.', 'type' => 'string', 'example' => '该字段暂未使用，有问题请联系管理员'], 'InternetIp' => ['title' => '', 'description' => 'The public IP address.', 'type' => 'string', 'example' => '47.99.188.31'], 'IntranetIp' => ['title' => '', 'description' => 'The internal IP address.', 'type' => 'string', 'example' => '172.16.109.130'], 'Id' => ['title' => '', 'description' => 'The primary key ID of the ticket.', 'type' => 'integer', 'format' => 'int64', 'example' => '9947'], 'AlarmEventType' => ['title' => '', 'description' => 'The alert event type.', 'type' => 'string', 'example' => '精准防御'], 'AnalysisResult' => ['title' => '', 'description' => 'The analysis process.', 'type' => 'string', 'example' => '[{"value":"服务器可能已被黑客攻击，存在恶意进程在运行。 分析过程：告警显示，服务端存在一个名为”dns.exe”的进程在访问”polling.burpcollaborator.net”，这是一个被黑名单列出的恶意域名。在正常情况下,”dns.exe”不应该单独存在于系统的路径下，并且也不应该访问这类恶意域名。因此，这个进程可能是黑客留下的恶意进程。","key":"结论"},{"value":"尽快对服务器进行全面扫描，清除恶意进程。同时，联系网络安全专家进行深入调查，以确定是否有其他潜在的安全威胁。","key":"处置建议"}]'], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'AFA6F7B7-7C4B-58BB-B8FB-E0FFA4483561'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'OK', 'title' => ''], 'Message' => ['description' => 'The message returned with the result.', 'type' => 'string', 'example' => 'system error', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful.'."\n" ."\n" .'- **true**: The call was successful.'."\n" ."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Query alert handling records', 'summary' => 'Queries alert handling records.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSuspEventPage', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"PageInfo\\": {\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 100\\n },\\n \\"Data\\": [\\n {\\n \\"AlarmId\\": 0,\\n \\"AlarmSource\\": \\"SUSP_EVENT\\",\\n \\"AlarmName\\": \\"Web服务漏洞利用\\",\\n \\"AlarmTime\\": \\"1722515522000\\\\n\\",\\n \\"DealTime\\": \\"1732515522000\\\\n\\",\\n \\"Status\\": \\"未处理\\",\\n \\"OwnerId\\": \\"张三\\",\\n \\"Remark\\": \\"处理完成\\",\\n \\"InstanceName\\": \\"shells-azhou\\",\\n \\"EventLevel\\": \\"suspicious\\",\\n \\"OccurrenceTime\\": \\"该字段暂未使用，有问题请联系管理员\\",\\n \\"InternetIp\\": \\"47.99.188.31\\",\\n \\"IntranetIp\\": \\"172.16.109.130\\",\\n \\"Id\\": 9947,\\n \\"AlarmEventType\\": \\"精准防御\\",\\n \\"AnalysisResult\\": \\"[{\\\\\\"value\\\\\\":\\\\\\"服务器可能已被黑客攻击，存在恶意进程在运行。 分析过程：告警显示，服务端存在一个名为”dns.exe”的进程在访问”polling.burpcollaborator.net”，这是一个被黑名单列出的恶意域名。在正常情况下,”dns.exe”不应该单独存在于系统的路径下，并且也不应该访问这类恶意域名。因此，这个进程可能是黑客留下的恶意进程。\\\\\\",\\\\\\"key\\\\\\":\\\\\\"结论\\\\\\"},{\\\\\\"value\\\\\\":\\\\\\"尽快对服务器进行全面扫描，清除恶意进程。同时，联系网络安全专家进行深入调查，以确定是否有其他潜在的安全威胁。\\\\\\",\\\\\\"key\\\\\\":\\\\\\"处置建议\\\\\\"}]\\"\\n }\\n ],\\n \\"RequestId\\": \\"AFA6F7B7-7C4B-58BB-B8FB-E0FFA4483561\\",\\n \\"Code\\": \\"OK\\",\\n \\"Message\\": \\"system error\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetSuspEventSummary' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179681', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The time filter type. You can filter by the last 7 days, last 30 days, last half year, or a custom time range.', 'enumValueTitles' => ['oneYear' => 'last year.', 'month' => 'last 30 days.', 'halfYear' => 'last half year.', 'customize' => 'custom time range.'], 'type' => 'string', 'required' => true, 'example' => 'month', ], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1729478485000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732156885986'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The source of the alert event.', 'enumValueTitles' => ['SYSTEM_SECURITY_EVENT' => 'legacy data source of Security Center alerts.', 'SUSP_CUSTOM_WAF' => 'MDR_WAF events.', 'SUSP_EVENT' => 'Security Center.', 'SUSP_CUSTOM_DDOS' => 'MDR_DDOS events.', 'SUSP_CUSTOM_CFW' => 'MDR_CFW events.'], 'type' => 'string', 'required' => false, 'example' => 'SUSP_EVENT', ], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'SuspEventDealSummaryDTO' => [ 'title' => '', 'description' => 'The alert handling summary.', 'type' => 'object', 'properties' => [ 'WaitHandleCount' => ['title' => '', 'description' => 'The number of unhandled alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'HandingCount' => ['title' => '', 'description' => 'The number of alerts being handled.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'CompletedCount' => ['title' => '', 'description' => 'The number of handled alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '20'], 'TotalCount' => ['title' => '', 'description' => 'The total number of alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '35'], 'HandingRate' => ['title' => '', 'description' => 'The alert handling rate.', 'type' => 'string', 'example' => '90'], 'TotalGrowthRate' => ['title' => '', 'description' => 'The year-over-year growth rate of alerts.', 'type' => 'string', 'example' => '10'], ], 'example' => '', ], 'SuspEventTrendDTO' => [ 'title' => '', 'description' => 'The alert response trend.', 'type' => 'object', 'properties' => [ 'TrendList' => [ 'title' => '', 'description' => 'The alert trend data.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Date' => ['title' => '', 'description' => 'The time point.', 'type' => 'string', 'example' => '202405或者20240501'], 'DealCount' => ['title' => '', 'description' => 'The number of handled alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'FindCount' => ['title' => '', 'description' => 'The number of detected alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '15'], ], 'title' => '', 'example' => '', ], 'example' => '', ], ], 'example' => '', ], 'SuspEventTopDTO' => [ 'title' => '', 'description' => 'The top 10 alerts before handling.', 'type' => 'object', 'properties' => [ 'SuspEventList' => [ 'title' => '', 'description' => 'The top 10 alerts before handling.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'EventName' => ['title' => '', 'description' => 'The alert name.', 'type' => 'string', 'example' => '主动外连风险 IP'], 'TaskCount' => ['title' => '', 'description' => 'The count.', 'type' => 'integer', 'format' => 'int64', 'example' => '7'], ], 'title' => '', 'example' => '', ], 'example' => '', ], ], 'example' => '', ], 'NetworkAttackTrendDTO' => [ 'title' => '', 'description' => 'The network attack trend.', 'type' => 'object', 'properties' => [ 'TrendList' => [ 'title' => '', 'description' => 'The trend data points for each attack type.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Date' => ['title' => '', 'description' => 'The date.', 'type' => 'string', 'example' => '202409或20240901'], 'DdosCount' => ['title' => '', 'description' => 'The number of DDoS attacks.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'WafCount' => ['title' => '', 'description' => 'The number of WAF attacks.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'EipCount' => ['title' => '', 'description' => 'The number of EIP attacks.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], ], 'title' => '', 'example' => '', ], 'example' => '', ], ], 'example' => '', ], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '9B2DAE9B-B901-5818-AFEF-E5637D938280'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'Successful!', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" ."\n" .'- true: The call was successful.'."\n" ."\n" .'- false: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Retrieve alert statistics', 'summary' => 'Retrieves statistics of security alerts.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSuspEventSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"SuspEventDealSummaryDTO\\": {\\n \\"WaitHandleCount\\": 10,\\n \\"HandingCount\\": 5,\\n \\"CompletedCount\\": 20,\\n \\"TotalCount\\": 35,\\n \\"HandingRate\\": \\"90\\",\\n \\"TotalGrowthRate\\": \\"10\\"\\n },\\n \\"SuspEventTrendDTO\\": {\\n \\"TrendList\\": [\\n {\\n \\"Date\\": \\"202405或者20240501\\",\\n \\"DealCount\\": 10,\\n \\"FindCount\\": 15\\n }\\n ]\\n },\\n \\"SuspEventTopDTO\\": {\\n \\"SuspEventList\\": [\\n {\\n \\"EventName\\": \\"主动外连风险 IP\\",\\n \\"TaskCount\\": 7\\n }\\n ]\\n },\\n \\"NetworkAttackTrendDTO\\": {\\n \\"TrendList\\": [\\n {\\n \\"Date\\": \\"202409或20240901\\",\\n \\"DdosCount\\": 10,\\n \\"WafCount\\": 10,\\n \\"EipCount\\": 10\\n }\\n ]\\n }\\n },\\n \\"RequestId\\": \\"9B2DAE9B-B901-5818-AFEF-E5637D938280\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"Successful!\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetSuspPageSummary' => [ 'summary' => 'Retrieves alert page statistics.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '180003', 'abilityTreeNodes' => ['FEATUREsos0FVTHS'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'WaitHandleCount' => ['title' => '', 'description' => 'The number of unhandled alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'HandingCount' => ['title' => '', 'description' => 'The number of alerts being handled.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'CompletedCount' => ['title' => '', 'description' => 'The number of handled alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'TotalCount' => ['title' => '', 'description' => 'The total number of alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '30'], 'HighCount' => ['title' => '', 'description' => 'The number of high-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'MediumCount' => ['title' => '', 'description' => 'The number of medium-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'LowCount' => ['title' => '', 'description' => 'The number of low-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'EF801DD1-D934-51B3-92D4-776CE17B184F'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'SUCCESS', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Alert page statistics', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSuspPageSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"WaitHandleCount\\": 10,\\n \\"HandingCount\\": 10,\\n \\"CompletedCount\\": 10,\\n \\"TotalCount\\": 30,\\n \\"HighCount\\": 10,\\n \\"MediumCount\\": 10,\\n \\"LowCount\\": 10\\n },\\n \\"RequestId\\": \\"EF801DD1-D934-51B3-92D4-776CE17B184F\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"SUCCESS\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetUserStatus' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '191425', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'Status' => [ 'description' => 'The status.', 'enumValueTitles' => ['NotEnabled' => 'Not enabled.', 'FirstLogin' => 'First login.', 'Enabled' => 'Enabled.'], 'type' => 'string', 'example' => 'FirstLogin', 'title' => '', ], 'Version' => [ 'title' => '', 'description' => 'The version.', 'enumValueTitles' => ['qiye' => 'MDR Enterprise Edition.', 'huhang' => 'MDR Escort Edition.', 'saszhjia' => 'Security Center Expert Edition.', 'mdrjichu' => 'MDR Basic Edition.', 'cfwtuoguan' => 'CFW Managed Edition.', 'mdrgaoji' => 'MDR Advanced Edition.', 'waftuoguan' => 'WAF Managed Edition.', 'base' => 'Basic Edition.'], 'type' => 'string', 'example' => 'mdrjichu', ], 'EndDate' => ['description' => 'The end time.', 'type' => 'string', 'example' => '2023-09-28 00:00:00', 'title' => ''], 'InstanceId' => ['description' => 'The instance ID.', 'type' => 'string', 'example' => '726cec3c-4887-4354-8c21-c0ad12e10fc2', 'title' => ''], 'StartDate' => ['description' => 'The start time.', 'type' => 'string', 'example' => '2023-09-20 00:00:00', 'title' => ''], 'CustomerType' => [ 'description' => 'The customer type.', 'enumValueTitles' => ['official' => 'Official customer.', 'trial' => 'Trial customer.'], 'type' => 'string', 'example' => 'official', 'title' => '', ], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'D8DBD769-613E-5E6B-A9FD-B622375B152D'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'SUCCESS', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful.'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Query user activation status', 'summary' => 'Queries the activation status of a user.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetUserStatus', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"Status\\": \\"FirstLogin\\",\\n \\"Version\\": \\"mdrjichu\\",\\n \\"EndDate\\": \\"2023-09-28 00:00:00\\",\\n \\"InstanceId\\": \\"726cec3c-4887-4354-8c21-c0ad12e10fc2\\",\\n \\"StartDate\\": \\"2023-09-20 00:00:00\\",\\n \\"CustomerType\\": \\"official\\"\\n },\\n \\"RequestId\\": \\"D8DBD769-613E-5E6B-A9FD-B622375B152D\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"SUCCESS\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetVulItemPage' => [ 'summary' => 'Queries security risks.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '185958', 'abilityTreeNodes' => ['FEATUREsosYT8XCW'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'CurrentPage', 'in' => 'formData', 'schema' => ['description' => 'The current page number.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '1', 'title' => ''], ], [ 'name' => 'PageSize', 'in' => 'formData', 'schema' => ['description' => 'The number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '10', 'title' => ''], ], [ 'name' => 'ScanType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The vulnerability type.', 'enumValueTitles' => ['sca' => 'software composition analysis.', 'app' => 'application vulnerability.', 'cve' => 'Linux vulnerability.', 'cms' => 'WebCMS vulnerability.', 'sys' => 'Windows vulnerability.', 'emg' => 'emergency vulnerability.'], 'type' => 'string', 'required' => false, 'example' => 'sca', ], ], [ 'name' => 'Level', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The risk level.', 'enumValueTitles' => ['nntf' => 'low.', 'later' => 'medium.', 'asap' => 'high.'], 'type' => 'string', 'required' => false, 'example' => 'later', ], ], [ 'name' => 'Dealed', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The processing status. Valid values:'."\n" .'- y: handled.'."\n" .'- n: unhandled.'."\n" .'- h: handling.', 'type' => 'string', 'required' => false, 'example' => 'n'], ], [ 'name' => 'Name', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The vulnerability name.', 'type' => 'string', 'required' => false, 'example' => 'oval:com.redhat.rhsa:def:20183665'], ], [ 'name' => 'AliasName', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The vulnerability alias.', 'type' => 'string', 'required' => false, 'example' => 'RHSA-2018:3665-Important: NetworkManager security update'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'PageInfo' => [ 'description' => 'The pagination information.', 'type' => 'object', 'properties' => [ 'CurrentPage' => ['description' => 'The page number of the current page in a paging query.', 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => ''], 'PageSize' => ['description' => 'The number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'example' => '10', 'title' => ''], 'TotalCount' => ['description' => 'The total number of records in the query result.', 'type' => 'integer', 'format' => 'int32', 'example' => '163', 'title' => ''], ], 'title' => '', 'example' => '', ], 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Id' => ['title' => '', 'description' => 'The primary key ID.', 'type' => 'integer', 'format' => 'int64', 'example' => '353845'], 'CustomerId' => ['title' => '', 'description' => 'The user ID.', 'type' => 'string', 'example' => '1940494487193744'], 'AliasName' => ['title' => '', 'description' => 'The vulnerability alias.', 'type' => 'string', 'example' => 'RHSA-2024:4620: libndp 安全更新'], 'AsapCount' => ['title' => '', 'description' => 'The number of vulnerabilities with a high fix priority.', 'type' => 'integer', 'format' => 'int32', 'example' => '74'], 'FindTime' => ['title' => '', 'description' => 'The timestamp when the vulnerability was last detected.', 'type' => 'string', 'example' => '2023-04-23 14:47:34'], 'HandledCount' => ['title' => '', 'description' => 'The number of handled vulnerabilities.', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], 'LaterCount' => ['title' => '', 'description' => 'The number of vulnerabilities with a medium fix priority.', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], 'Name' => ['title' => '', 'description' => 'The vulnerability name.', 'type' => 'string', 'example' => 'oval:com.redhat.rhsa:def:20205002'], 'NntfCount' => ['title' => '', 'description' => 'The number of vulnerabilities with a low fix priority.', 'type' => 'integer', 'format' => 'int32', 'example' => '8'], 'Tags' => ['title' => '', 'description' => 'The tags.', 'type' => 'string', 'example' => 'Elevation of Privilege'], 'TotalFixCount' => ['title' => '', 'description' => 'The total number of fixed vulnerabilities.', 'type' => 'integer', 'format' => 'int64', 'example' => '50'], 'ScanType' => ['title' => '', 'description' => 'The vulnerability type.', 'type' => 'string', 'example' => 'sca'], 'Level' => ['title' => '', 'description' => 'The risk level.', 'type' => 'string', 'example' => 'later'], 'Dealed' => ['title' => '', 'description' => 'The processing status.', 'type' => 'string', 'example' => 'y'], 'Related' => ['title' => '', 'description' => 'The CVE ID.', 'type' => 'string', 'example' => 'CVE-2019-20907'], 'RelatedCveCount' => ['title' => '', 'description' => 'The number of associated CVE IDs.', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], 'CveUrlPrefix' => ['title' => '', 'description' => 'The URL prefix for CVE fix suggestions.', 'type' => 'string', 'example' => 'https://avd.aliyun.com/detail/'], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '02F8BBF3-2D61-5982-8911-EEB387BE3AF8'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" ."\n" .'- true: The call was successful.'."\n" .'- false: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Query security risks', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetVulItemPage', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"PageInfo\\": {\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 163\\n },\\n \\"Data\\": [\\n {\\n \\"Id\\": 353845,\\n \\"CustomerId\\": \\"1940494487193744\\",\\n \\"AliasName\\": \\"RHSA-2024:4620: libndp 安全更新\\",\\n \\"AsapCount\\": 74,\\n \\"FindTime\\": \\"2023-04-23 14:47:34\\",\\n \\"HandledCount\\": 20,\\n \\"LaterCount\\": 10,\\n \\"Name\\": \\"oval:com.redhat.rhsa:def:20205002\\",\\n \\"NntfCount\\": 8,\\n \\"Tags\\": \\"Elevation of Privilege\\",\\n \\"TotalFixCount\\": 50,\\n \\"ScanType\\": \\"sca\\",\\n \\"Level\\": \\"later\\",\\n \\"Dealed\\": \\"y\\",\\n \\"Related\\": \\"CVE-2019-20907\\",\\n \\"RelatedCveCount\\": 20,\\n \\"CveUrlPrefix\\": \\"https://avd.aliyun.com/detail/\\"\\n }\\n ],\\n \\"RequestId\\": \\"02F8BBF3-2D61-5982-8911-EEB387BE3AF8\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetVulListById' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'abilityTreeCode' => '179781', 'abilityTreeNodes' => ['FEATUREsosYT8XCW'], ], 'parameters' => [ [ 'name' => 'CurrentPage', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The number of the current page.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'], ], [ 'name' => 'PageSize', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '10'], ], [ 'name' => 'Id', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The primary key ID.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '4209205'], ], [ 'name' => 'Dealed', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'Specifies whether the vulnerability has been processed. Valid values:'."\n" ."\n" .'- y: processed'."\n" .'- n: not processed.', 'type' => 'string', 'required' => false, 'example' => 'n'], ], [ 'name' => 'Necessity', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The risk level.', 'type' => 'string', 'required' => false, 'example' => 'asap,later,nntf'], ], [ 'name' => 'Remark', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The asset information of the vulnerability to query. You can set this parameter to the asset name, public IP address, or private IP address.', 'type' => 'string', 'required' => false, 'example' => 'production_nat_cn-hangzhou_zone_105'], ], [ 'name' => 'Uuids', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The UUIDs of the servers for which you want to query vulnerabilities. Separate multiple UUIDs with commas (,).', 'type' => 'string', 'required' => false, 'example' => '3615b908-995a-4edb-bc85-1981b4e94ba0,9c52cf9a-d8ba-4e31-ae06-500b879ee4e6,4b7de3cf-c4ac-42fc-8804-35070493dc29,f3c01525-0777-4c97-88d9-bec11afd4a6a,a80bd516-c4f3-4c27-a169-c8abfaf9e89e'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'PageInfo' => [ 'description' => 'The pagination information.', 'type' => 'object', 'properties' => [ 'CurrentPage' => ['description' => 'The current page number.', 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => ''], 'PageSize' => ['description' => 'The number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'example' => '10', 'title' => ''], 'TotalCount' => ['description' => 'The total number of records in the query result.', 'type' => 'integer', 'format' => 'int32', 'example' => '100', 'title' => ''], ], 'title' => '', 'example' => '', ], 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Necessity' => ['title' => '', 'description' => 'The necessity level of vulnerability fixing.', 'type' => 'string', 'example' => 'later,asap,nntf'], 'RepairTs' => ['title' => '', 'description' => 'The timestamp when the vulnerability was fixed.', 'type' => 'string', 'example' => '1541207563000'], 'Uuid' => ['title' => '', 'description' => 'The UUID of the asset instance.', 'type' => 'string', 'example' => 'hdm_5cf2eaf263c021b354877943f181956d'], 'Status' => ['title' => '', 'description' => 'The vulnerability status. Valid values:'."\n" ."\n" .'- 1: unfixed'."\n" .'- 2: fix failed'."\n" .'- 3: rollback failed'."\n" .'- 4: fixing'."\n" .'- 5: rolling back'."\n" .'- 6: verifying'."\n" .'- 7: fixed'."\n" .'- 8: fixed, pending restart'."\n" .'- 9: rollback succeeded'."\n" .'- 10: ignored'."\n" .'- 11: rollback succeeded, pending restart'."\n" .'- 12: vulnerability does not exist'."\n" .'- 20: expired.', 'type' => 'string', 'example' => '1'], 'InternetIp' => ['title' => '', 'description' => 'The public IP address of the asset.', 'type' => 'string', 'example' => '39.101.73.28'], 'Tag' => ['title' => '', 'description' => 'The vulnerability tag.', 'type' => 'string', 'example' => 'Restart Required'], 'Name' => ['title' => '', 'description' => 'The vulnerability name.', 'type' => 'string', 'example' => 'SCA:ACSV-2020-111301'], 'Related' => ['title' => '', 'description' => 'The list of CVEs associated with the vulnerability. Multiple values are separated by commas (,).', 'type' => 'string', 'example' => 'CVE-2020-13935'], 'IntranetIp' => ['title' => '', 'description' => 'The private IP address of the asset.', 'type' => 'string', 'example' => '172.22.216.17'], 'LastTs' => ['title' => '', 'description' => 'The timestamp when the vulnerability was last detected.', 'type' => 'string', 'example' => '1620404763000'], 'FirstTs' => ['title' => '', 'description' => 'The timestamp when the vulnerability was first detected.', 'type' => 'string', 'example' => '1620404763000'], 'AliasName' => ['title' => '', 'description' => 'The alias of the vulnerability.', 'type' => 'string', 'example' => 'Tomcat websocket 拒绝服务漏洞利用代码披露（CVE-2020-13935）'], 'InstanceName' => ['title' => '', 'description' => 'The name of the asset instance.', 'type' => 'string', 'example' => '凌星-CentOS'], 'RepairCmd' => ['title' => '', 'description' => 'The fix command.', 'type' => 'string', 'example' => '*** update python-perf'], 'EffectMsgDTOS' => [ 'title' => '', 'description' => 'The impact description.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'SoftName' => ['title' => '', 'description' => 'The software name.', 'type' => 'string', 'example' => 'python-perf 3.10.0'], 'MatchList' => ['title' => '', 'description' => 'The hit.', 'type' => 'string', 'example' => 'fastjson(jar) extendField.safemode equals false'], 'Path' => ['title' => '', 'description' => 'The path.', 'type' => 'string', 'example' => '/uat6/qry/enquiry/policy/yrtPolicyList'], ], 'title' => '', 'example' => '', ], 'example' => '', ], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'D38B3D2F-67FD-57FF-87D1-C431D2C70F76'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" ."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'title' => 'Query processed vulnerability details', 'summary' => 'Queries the details of processed vulnerabilities.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetVulListById', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"PageInfo\\": {\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 100\\n },\\n \\"Data\\": [\\n {\\n \\"Necessity\\": \\"later,asap,nntf\\",\\n \\"RepairTs\\": \\"1541207563000\\",\\n \\"Uuid\\": \\"hdm_5cf2eaf263c021b354877943f181956d\\",\\n \\"Status\\": \\"1\\",\\n \\"InternetIp\\": \\"39.101.73.28\\",\\n \\"Tag\\": \\"Restart Required\\",\\n \\"Name\\": \\"SCA:ACSV-2020-111301\\",\\n \\"Related\\": \\"CVE-2020-13935\\",\\n \\"IntranetIp\\": \\"172.22.216.17\\",\\n \\"LastTs\\": \\"1620404763000\\",\\n \\"FirstTs\\": \\"1620404763000\\",\\n \\"AliasName\\": \\"Tomcat websocket 拒绝服务漏洞利用代码披露（CVE-2020-13935）\\",\\n \\"InstanceName\\": \\"凌星-CentOS\\",\\n \\"RepairCmd\\": \\"*** update python-perf\\",\\n \\"EffectMsgDTOS\\": [\\n {\\n \\"SoftName\\": \\"python-perf 3.10.0\\",\\n \\"MatchList\\": \\"fastjson(jar) extendField.safemode equals false\\",\\n \\"Path\\": \\"/uat6/qry/enquiry/policy/yrtPolicyList\\"\\n }\\n ]\\n }\\n ],\\n \\"RequestId\\": \\"D38B3D2F-67FD-57FF-87D1-C431D2C70F76\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetVulPageSummary' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '180002', 'abilityTreeNodes' => ['FEATUREsosYT8XCW'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data query result.', 'type' => 'object', 'properties' => [ 'WaitHandleCount' => ['title' => '', 'description' => 'The number of unhandled alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '4'], 'HandingCount' => ['title' => '', 'description' => 'The number of alerts being handled.', 'type' => 'integer', 'format' => 'int64', 'example' => '6'], 'CompletedCount' => ['title' => '', 'description' => 'The number of handled alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '1990'], 'TotalCount' => ['title' => '', 'description' => 'The total number of alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '2000'], 'HighCount' => ['title' => '', 'description' => 'The number of high-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '500'], 'MediumCount' => ['title' => '', 'description' => 'The number of medium-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '500'], 'LowCount' => ['title' => '', 'description' => 'The number of low-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '1000'], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'A3A575C8-80F9-5F04-AA24-CCAC246884A3'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The response message.', 'type' => 'string', 'example' => 'operation success', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Query alert page statistics', 'summary' => 'Queries alert page statistics.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetVulPageSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"WaitHandleCount\\": 4,\\n \\"HandingCount\\": 6,\\n \\"CompletedCount\\": 1990,\\n \\"TotalCount\\": 2000,\\n \\"HighCount\\": 500,\\n \\"MediumCount\\": 500,\\n \\"LowCount\\": 1000\\n },\\n \\"RequestId\\": \\"A3A575C8-80F9-5F04-AA24-CCAC246884A3\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"operation success\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetVulSummary' => [ 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179685', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The time filter type. You can filter by the last 7 days, last 30 days, last half year, or a custom time range.', 'enumValueTitles' => ['oneYear' => 'last year.', 'month' => 'last 30 days.', 'halfYear' => 'last half year.', 'customize' => 'custom.'], 'type' => 'string', 'required' => true, 'example' => 'month', ], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1729478485000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732156885986'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The source of the alert event.', 'type' => 'string', 'required' => false, 'example' => '该字段暂未使用，有问题请联系管理员'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'WaitHandleCount' => ['title' => '', 'description' => 'The number of unhandled risks.', 'type' => 'integer', 'format' => 'int64', 'example' => '5'], 'CompletedCount' => ['title' => '', 'description' => 'The number of handled risks.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'DealRate' => ['title' => '', 'description' => 'The risk convergence rate.', 'type' => 'string', 'example' => '50'], 'TrendList' => [ 'title' => '', 'description' => 'The collection of vulnerability discovery trend nodes.', 'type' => 'array', 'items' => [ 'description' => 'The data object.', 'type' => 'object', 'properties' => [ 'Date' => ['title' => '', 'description' => 'The time node.', 'type' => 'string', 'example' => '202407或者20240701'], 'DealCount' => ['title' => '', 'description' => 'The number of handled risks.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'FindCount' => ['title' => '', 'description' => 'The number of discovered risks.', 'type' => 'integer', 'format' => 'int64', 'example' => '15'], ], 'title' => '', 'example' => '', ], 'example' => '', ], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'EF801DD1-D934-51B3-92D4-776CE17B184F'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'OK', 'title' => ''], 'Message' => ['description' => 'The message returned for the request.', 'type' => 'string', 'example' => 'system error', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Retrieve risk statistics', 'summary' => 'Retrieves statistics on security risks.', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetVulSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"WaitHandleCount\\": 5,\\n \\"CompletedCount\\": 10,\\n \\"DealRate\\": \\"50\\",\\n \\"TrendList\\": [\\n {\\n \\"Date\\": \\"202407或者20240701\\",\\n \\"DealCount\\": 10,\\n \\"FindCount\\": 15\\n }\\n ]\\n },\\n \\"RequestId\\": \\"EF801DD1-D934-51B3-92D4-776CE17B184F\\",\\n \\"Code\\": \\"OK\\",\\n \\"Message\\": \\"system error\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'GetWorkTaskSummary' => [ 'summary' => 'Retrieves statistics for frontline tickets.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'readAndWrite', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '179659', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], 'autoTest' => true, 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DateType', 'in' => 'formData', 'schema' => [ 'title' => '', 'description' => 'The time filter type. Supports filtering by last 7 days, last 30 days, last half year, custom range, and other options.', 'enumValueTitles' => ['oneYear' => 'last year.', 'month' => 'last 30 days.', 'halfYear' => 'last half year.', 'customize' => 'custom.'], 'type' => 'string', 'required' => true, 'example' => 'month', ], ], [ 'name' => 'StartDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The start time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1729478485000'], ], [ 'name' => 'EndDate', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The end time.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1732156885986'], ], [ 'name' => 'SuspEventSource', 'in' => 'formData', 'schema' => ['title' => '', 'description' => 'The alert event source.', 'type' => 'string', 'required' => false, 'example' => '该字段暂时未用，有问题请联系管理员'], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'WorkTaskCount' => ['title' => '', 'description' => 'The number of service responses.', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], 'WorkTaskGrowthRate' => ['title' => '', 'description' => 'The year-over-year growth rate of service responses.', 'type' => 'string', 'example' => '20'], 'DealAverageDuration' => ['title' => '', 'description' => 'The average response time (in minutes).', 'type' => 'integer', 'format' => 'int64', 'example' => '60'], 'DealAverageDurationGrowthRate' => ['title' => '', 'description' => 'The year-over-year growth rate of the average response time.', 'type' => 'string', 'example' => '20'], 'WorkTaskDealRate' => ['title' => '', 'description' => 'The issue closure rate.', 'type' => 'string', 'example' => '90'], 'WorkTaskDealRateGrowthRate' => ['title' => '', 'description' => 'The year-over-year change in the issue closure rate.', 'type' => 'string', 'example' => '20'], 'DealWorkTaskCount' => ['title' => '', 'description' => 'The number of responded tickets.', 'type' => 'integer', 'format' => 'int64', 'example' => '100'], 'DealWorkTaskCountRate' => ['title' => '', 'description' => 'The year-over-year change in the number of responded tickets.', 'type' => 'string', 'example' => '20'], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => 'EF801DD1-D934-51B3-92D4-776CE17B184F'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'OK', 'title' => ''], 'Message' => ['description' => 'The message returned for the result.', 'type' => 'string', 'example' => 'Successful!', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" .'- **true**: The call was successful.'."\n" .'- **false**: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Retrieve frontline ticket statistics', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetWorkTaskSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"WorkTaskCount\\": 10,\\n \\"WorkTaskGrowthRate\\": \\"20\\",\\n \\"DealAverageDuration\\": 60,\\n \\"DealAverageDurationGrowthRate\\": \\"20\\",\\n \\"WorkTaskDealRate\\": \\"90\\",\\n \\"WorkTaskDealRateGrowthRate\\": \\"20\\",\\n \\"DealWorkTaskCount\\": 100,\\n \\"DealWorkTaskCountRate\\": \\"20\\"\\n },\\n \\"RequestId\\": \\"EF801DD1-D934-51B3-92D4-776CE17B184F\\",\\n \\"Code\\": \\"OK\\",\\n \\"Message\\": \\"Successful!\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', ], 'PageServiceCustomer' => [ 'summary' => 'Queries service customer information.', 'methods' => ['get', 'post'], 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'read', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '173423', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'CurrentPage', 'in' => 'formData', 'schema' => ['description' => 'The page number of the query results. Default value: 1.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '1', 'title' => ''], ], [ 'name' => 'PageSize', 'in' => 'formData', 'schema' => ['description' => 'The number of records per page.', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '10', 'title' => ''], ], [ 'name' => 'StartTime', 'in' => 'formData', 'schema' => ['description' => 'The start time. The value is a UNIX timestamp in milliseconds.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1710641101000', 'title' => ''], ], [ 'name' => 'EndTime', 'in' => 'formData', 'schema' => ['description' => 'The end time. The value is a UNIX timestamp in milliseconds.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1710641101123', 'title' => ''], ], [ 'name' => 'AuthStatus', 'in' => 'formData', 'schema' => [ 'description' => 'The authorization status.', 'enumValueTitles' => [1 => 'authorized.', 9 => 'unauthorized.'], 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1', 'title' => '', ], ], [ 'name' => 'MonitorAuthStatus', 'in' => 'formData', 'schema' => [ 'description' => 'The authorization status for China Cloud Security alerts.', 'enumValueTitles' => [1 => 'authorized.', 9 => 'unauthorized.'], 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1', 'title' => '', ], ], [ 'name' => 'CmAuthStatus', 'in' => 'formData', 'schema' => [ 'description' => 'The authorization status for CloudMonitor alerts.', 'enumValueTitles' => ['unauthorized.', 'authorized.'], 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1', 'title' => '', ], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'PageInfo' => [ 'description' => 'The pagination information.', 'type' => 'object', 'properties' => [ 'CurrentPage' => ['description' => 'The page number of the current page in paging.', 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => ''], 'PageSize' => ['description' => 'The number of records per page.', 'type' => 'integer', 'format' => 'int32', 'example' => '10', 'title' => ''], 'TotalCount' => ['description' => 'The total number of query results.', 'type' => 'integer', 'format' => 'int32', 'example' => '100', 'title' => ''], ], 'title' => '', 'example' => '', ], 'Data' => [ 'description' => 'The data query results.', 'type' => 'array', 'items' => [ 'description' => 'The query result object.', 'type' => 'object', 'properties' => [ 'UserId' => ['description' => 'The customer ID.', 'type' => 'string', 'example' => '1667751131382856', 'title' => ''], 'Aliuid' => ['description' => 'The customer UID.', 'type' => 'string', 'example' => '1667751131382856', 'title' => ''], 'Name' => ['description' => 'The customer name.', 'type' => 'string', 'example' => '中国工程院', 'title' => ''], 'OwnId' => ['description' => 'The name of the owner.', 'type' => 'string', 'example' => '常温', 'title' => ''], 'Level' => [ 'description' => 'The customer level.', 'enumValueTitles' => ['GC1' => 'GC1', 'GC3' => 'GC3', 'GC2' => 'GC2', 'GC5' => 'GC5', 'GC4' => 'GC4', 'GC7' => 'GC7', 'GC6' => 'GC6'], 'type' => 'string', 'example' => 'GC1', 'title' => '', ], 'Version' => ['description' => 'The version information.', 'type' => 'string', 'example' => '企业版', 'title' => ''], 'AuthStatus' => [ 'description' => 'The authorization status.', 'enumValueTitles' => [1 => 'authorized.', 9 => 'unauthorized.'], 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => '', ], 'MonitorAuthStatus' => [ 'description' => 'The authorization status for China Cloud Security alerts.', 'enumValueTitles' => [1 => 'authorized.', 9 => 'unauthorized.'], 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => '', ], 'CmAuthStatus' => [ 'description' => 'The authorization status for CloudMonitor alerts.', 'enumValueTitles' => ['unauthorized.', 'authorized.'], 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => '', ], 'StartTime' => ['description' => 'The start time. The value is a UNIX timestamp in milliseconds.', 'type' => 'integer', 'format' => 'int64', 'example' => '1710123149000', 'title' => ''], 'EndTime' => ['description' => 'The end time. The value is a UNIX timestamp in milliseconds.', 'type' => 'integer', 'format' => 'int64', 'example' => '1710123149222', 'title' => ''], ], 'title' => '', 'example' => '', ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '808A307F-9513-5099-AAA5-98D4EF199140'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => 'System error or openapi error', 'title' => ''], 'Message' => ['description' => 'The response message. A success message is returned if the request succeeds. A failure reason is returned if the request fails.', 'type' => 'string', 'example' => 'OK', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the request was successful. Valid values:'."\n" .'- true: The request was successful.'."\n" .'- false: The request failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"PageInfo\\": {\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 100\\n },\\n \\"Data\\": [\\n {\\n \\"UserId\\": \\"1667751131382856\\",\\n \\"Aliuid\\": \\"1667751131382856\\",\\n \\"Name\\": \\"中国工程院\\",\\n \\"OwnId\\": \\"常温\\",\\n \\"Level\\": \\"GC1\\",\\n \\"Version\\": \\"企业版\\",\\n \\"AuthStatus\\": 1,\\n \\"MonitorAuthStatus\\": 1,\\n \\"CmAuthStatus\\": 0,\\n \\"StartTime\\": 1710123149000,\\n \\"EndTime\\": 1710123149222\\n }\\n ],\\n \\"RequestId\\": \\"808A307F-9513-5099-AAA5-98D4EF199140\\",\\n \\"Code\\": \\"System error or openapi error\\",\\n \\"Message\\": \\"OK\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', 'title' => 'Query service customer information', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:PageServiceCustomer', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'SendCustomEvent' => [ 'summary' => 'Sends a custom alert event.', 'methods' => ['get', 'post'], 'schemes' => ['https'], 'security' => [ [ 'AK' => [], ], ], 'operationType' => 'write', 'deprecated' => false, 'systemTags' => [ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '247510', 'abilityTreeNodes' => ['FEATUREsos0PY09L'], ], 'parameters' => [ [ 'name' => 'CustomerId', 'in' => 'formData', 'schema' => ['description' => 'The user ID.', 'type' => 'string', 'required' => true, 'example' => '1214484929940219', 'title' => ''], ], [ 'name' => 'DataSource', 'in' => 'formData', 'schema' => ['description' => 'The data source.', 'type' => 'string', 'required' => false, 'example' => 'aegis_suspicious_event', 'title' => ''], ], [ 'name' => 'EventDescription', 'in' => 'formData', 'schema' => ['description' => 'The event details.', 'type' => 'string', 'required' => false, 'example' => '疑似病毒木马启动运行。', 'title' => ''], ], [ 'name' => 'EventDetails', 'in' => 'formData', 'schema' => ['description' => 'The alert event details.', 'type' => 'string', 'required' => false, 'example' => '[{"name":"提示","type":"text","value":"在您的系统上发现可疑进程启动行为，通常与病毒木马或入侵事件相关"},{"name":"ATT&CK攻击阶段","type":"text","value":"代码执行"},{"name":"恶意行为","type":"text","value":"可疑的漏洞利用代码执行"},{"name":"规则类型","type":"text","value":"进程启动"},{"name":"规则引擎","type":"text","value":"精准攻击识别引擎"},{"name":"处置动作","type":"text","value":"阻断行为"},{"name":"进程路径","type":"text","value":"/usr/bin/python3.9"},{"name":"命令行","type":"text","value":"python3 /root/poc/python/cve-2018-15473.py --username root --port 22"},{"name":"父进程路径","type":"text","value":"/bin/gunkit"},{"name":"父进程命令行","type":"text","value":"gunkit serve-grpc --addr unix:///data/gunkit-grpc.sock"},{"name":"进程ID","type":"text","value":"22714"},{"name":"父进程ID","type":"text","value":"2986"},{"name":"描述","type":"text","value":"主动防御检测到可疑进程启动行为，这类可疑进程通常存在于特殊的系统目录，或通过后缀伪装成文档/音频/图片等文件诱导用户运行，该异常行为已被成功拦截"},{"name":"处置建议","type":"text","value":"请您及时排查是否是正常的业务操作，如果您觉得此次拦截是非预期的，那您可以在主动防御 - 恶意行为防御页面中，关闭“可疑进程启动“规则集或者将受影响机器从管理主机中移除"},{"name":"父进程关系","type":"processChain","value":"1:::/usr/lib/systemd/systemd --switched-root --system --deserialize 22 &&& 2939:::/usr/local/bin/containerd-shim-runc-v2 -namespace moby -id 270f164903b47d4e219b410b8d11d9079a7ad1bac8133aea604598300d3b03d5 -address /run/containerd/containerd.sock &&& 2962:::/usr/bin/python3 /usr/bin/supervisord -n &&& 2986:::gunkit serve-grpc --addr unix:///data/gunkit-grpc.sock"}]', 'title' => ''], ], [ 'name' => 'EventName', 'in' => 'formData', 'schema' => ['description' => 'The event name.', 'type' => 'string', 'required' => true, 'example' => '客户端离线', 'title' => ''], ], [ 'name' => 'EventType', 'in' => 'formData', 'schema' => [ 'description' => 'The event type.', 'enumValueTitles' => [ 'SUMMARY_REPORT' => 'summary report.', 'MONTH_REPORT' => 'monthly report.', 'SYSTEM_EVENT' => 'system event.', 'OTHER_REPORTS' => 'other reports.', 'PLATFORM_VULNERABILITY_MONITOR' => 'vulnerability scan monitoring.', 'PROJECT_SUMMARY_MEETING' => 'project summary meeting.', 'CUSTOM_EVENT' => 'custom event.', 'SLS_LOG_SUSP_EVENT' => 'Security Center - LOG.', 'CUSTOMER_VIEW' => 'customer follow-up.', 'MANUAL' => 'manual.', 'RISK_NOTIFY' => 'risk notification.', 'SUSP_CUSTOM_CFW' => 'MDR_CFW event.', 'PROJECT_LAUNCH_MEETING' => 'project launch meeting.', 'SYSTEM_VULNERABILITY_SCAN' => 'scanner vulnerability scan.', 'RISK_BRIEFING' => 'risk briefing.', 'DING_TALK_CUSTOMER' => 'customer DingTalk consultation.', 'SUSP_CUSTOM_SAS' => 'MDR_SAS event.', 'SYSTEM_SECURITY_EVENT' => 'security event.', 'SYSTEM_SECURITY_ACCESS' => 'security assessment.', 'SYSTEM_PROJECT_DELIVERY' => 'project delivery.', 'SUSP_CUSTOM_WAF' => 'MDR_WAF event.', 'SUSP_EVENT' => 'Security Center - SUSP_EVENT.', 'PROJECT_QUARTERLY_MEETING' => 'project quarterly meeting.', 'SUSP_CUSTOM_DDOS' => 'MDR_DDOS event.', 'SUSP_CUSTOM_OTHER' => 'MDR_Other event.', 'QUARTERLY_REPORT' => 'quarterly report.', 'SUSP_CUSTOM_EVENT' => 'custom event.', 'YUNDUN_VULNERABILITY_SCAN' => 'Security Center vulnerability scan.', ], 'type' => 'string', 'required' => true, 'example' => 'SUSP_CUSTOM_CFW', 'title' => '', ], ], [ 'name' => 'OccurrenceTime', 'in' => 'formData', 'schema' => ['description' => 'The time when the alert event first occurred.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1724956996000', 'title' => ''], ], [ 'name' => 'FindTime', 'in' => 'formData', 'schema' => ['description' => 'The time when the alert was detected.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1734788109000', 'title' => ''], ], [ 'name' => 'InstanceId', 'in' => 'formData', 'schema' => ['description' => 'The instance ID.', 'type' => 'string', 'required' => false, 'example' => 'i-uf60h3ns25bzq9eyf8ps', 'title' => ''], ], [ 'name' => 'InstanceName', 'in' => 'formData', 'schema' => ['description' => 'The instance name.', 'type' => 'string', 'required' => false, 'example' => '猫吉-售卖-MDR扫描器集群1', 'title' => ''], ], [ 'name' => 'IsSend', 'in' => 'formData', 'schema' => ['description' => 'Specifies whether to send the event.', 'type' => 'string', 'required' => true, 'example' => '0', 'title' => ''], ], [ 'name' => 'Level', 'in' => 'formData', 'schema' => [ 'description' => 'The event level.', 'enumValueTitles' => ['serious' => 'critical.', 'suspicious' => 'suspicious.', 'remind' => 'reminder.'], 'type' => 'string', 'required' => true, 'example' => 'serious', 'title' => '', ], ], [ 'name' => 'Product', 'in' => 'formData', 'schema' => ['description' => 'The product name.', 'type' => 'string', 'required' => false, 'example' => 'CloudSecCenter', 'title' => ''], ], [ 'name' => 'UniqueId', 'in' => 'formData', 'schema' => ['description' => 'The unique ID.', 'type' => 'string', 'required' => true, 'example' => '68888f02-98f2-492b-a2b2-5b13295755b7', 'title' => ''], ], [ 'name' => 'Uuid', 'in' => 'formData', 'schema' => ['description' => 'The UUID.', 'type' => 'string', 'required' => false, 'example' => '93B6CDAB-7D2E-33D2-9EBA-25D561A2E95F', 'title' => ''], ], [ 'name' => 'EventMarkdown', 'in' => 'formData', 'schema' => ['description' => 'The event details in Markdown format.', 'type' => 'string', 'required' => false, 'example' => 'None', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => '', 'description' => 'The response.', 'type' => 'object', 'properties' => [ 'Data' => [ 'description' => 'The data returned by the operation.', 'type' => 'object', 'properties' => [ 'Id' => ['title' => '', 'description' => 'The ticket ID.', 'type' => 'integer', 'format' => 'int64', 'example' => '1914348'], 'WorkTaskName' => ['title' => '', 'description' => 'The ticket name.', 'type' => 'string', 'example' => '22端口禁止任意IP访问 '], 'EventId' => ['title' => '', 'description' => 'The alert ID.', 'type' => 'string', 'example' => 'c0dc71d1-8a1d-4043-9767-f6c420e34901-81bd'], 'EventType' => ['title' => '', 'description' => 'The alerting type.', 'type' => 'string', 'example' => 'SUSP_CUSTOM_WAF'], 'CustomerId' => ['title' => '', 'description' => 'The service UID.', 'type' => 'string', 'example' => '1601097845544644'], 'CustomerName' => ['title' => '', 'description' => 'The customer name.', 'type' => 'string', 'example' => '天津瑞鹏昇科技发展有限公司'], 'OwnerId' => ['title' => '', 'description' => 'The owner.', 'type' => 'string', 'example' => '352675'], 'OwnerName' => ['title' => '', 'description' => 'The owner name.', 'type' => 'string', 'example' => '乐牙'], ], 'title' => '', 'example' => '', ], 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'required' => true, 'example' => '606EB377-155D-5AEB-AC4F-F013444A4C45'], 'Code' => ['description' => 'The response code.', 'type' => 'string', 'example' => '200', 'title' => ''], 'Message' => ['description' => 'The returned message. If the request is successful, a success message is returned. If the request fails, the failure reason is returned.', 'type' => 'string', 'example' => 'successful', 'title' => ''], 'HttpStatusCode' => ['description' => 'The HTTP status code.', 'type' => 'integer', 'format' => 'int32', 'example' => '200', 'title' => ''], 'Success' => ['description' => 'Indicates whether the call was successful. Valid values:'."\n" ."\n" .'- true: The call was successful.'."\n" ."\n" .'- false: The call failed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'example' => '', ], ], ], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Data\\": {\\n \\"Id\\": 1914348,\\n \\"WorkTaskName\\": \\"22端口禁止任意IP访问 \\",\\n \\"EventId\\": \\"c0dc71d1-8a1d-4043-9767-f6c420e34901-81bd\\",\\n \\"EventType\\": \\"SUSP_CUSTOM_WAF\\",\\n \\"CustomerId\\": \\"1601097845544644\\",\\n \\"CustomerName\\": \\"天津瑞鹏昇科技发展有限公司\\",\\n \\"OwnerId\\": \\"352675\\",\\n \\"OwnerName\\": \\"乐牙\\"\\n },\\n \\"RequestId\\": \\"606EB377-155D-5AEB-AC4F-F013444A4C45\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"HttpStatusCode\\": 200,\\n \\"Success\\": true\\n}","type":"json"}]', 'title' => 'Send a custom alert event', 'changeSet' => [], 'ramActions' => [ [ 'operationType' => 'create', 'ramAction' => [ 'action' => 'yundun-mss:SendCustomEvent', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], ], 'endpoints' => [ ['regionId' => 'public', 'regionName' => 'Public network', 'areaId' => 'other', 'areaName' => 'Other', 'public' => 'mssp.aliyuncs.com', 'endpoint' => 'mssp.aliyuncs.com', 'vpc' => ''], ], 'errorCodes' => [], 'changeSet' => [], 'ram' => [ 'productCode' => 'Mssp', 'productName' => 'Managed Security Service', 'ramCodes' => ['yundun-mss'], 'ramLevel' => 'OPERATION', 'ramConditions' => [], 'ramActions' => [ [ 'apiName' => 'CreateServiceWorkOrder', 'description' => '', 'operationType' => 'create', 'ramAction' => [ 'action' => 'yundun-mss:CreateServiceWorkOrder', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetDetailById', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetDetailById', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetVulItemPage', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetVulItemPage', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'DisposeWorkTask', 'description' => '', 'operationType' => 'update', 'ramAction' => [ 'action' => 'yundun-mss:DisposeWorkTask', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetVulPageSummary', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetVulPageSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetDocumentDownloadUrl', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetDocumentDownloadUrl', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'CreateServiceLinkedRole', 'description' => '', 'operationType' => 'create', 'ramAction' => [ 'action' => 'yundun-mss:CreateServiceLinkedRole', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'DeleteDjbhReport', 'description' => '', 'operationType' => 'delete', 'ramAction' => [ 'action' => 'yundun-mss:DeleteDjbhReport', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetVulSummary', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetVulSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetWorkTaskSummary', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetWorkTaskSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetSuspEventPage', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSuspEventPage', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetUserStatus', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetUserStatus', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'ConfirmDjbhReport', 'description' => '', 'operationType' => 'update', 'ramAction' => [ 'action' => 'yundun-mss:ConfirmDjbhReport', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetSowList', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSowList', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'DescribeServiceLinkedRole', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:DescribeServiceLinkedRole', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'PageServiceCustomer', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:PageServiceCustomer', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetSafetyCover', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetSafetyCover', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'SendCustomEvent', 'description' => '', 'operationType' => 'create', 'ramAction' => [ 'action' => 'yundun-mss:SendCustomEvent', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetDocumentSummary', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetDocumentSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetConsoleScore', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetConsoleScore', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetSuspPageSummary', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSuspPageSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetBaselineSummary', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetBaselineSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetAttackedAssetDeal', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetAttackedAssetDeal', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetVulListById', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetVulListById', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'DisposeServiceWorkOrder', 'description' => '', 'operationType' => 'update', 'ramAction' => [ 'action' => 'yundun-mss:DisposeServiceWorkOrder', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetSuspEventSummary', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetSuspEventSummary', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetAlarmDetailById', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetAlarmDetailById', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetDocumentPage', 'description' => '', 'operationType' => 'list', 'ramAction' => [ 'action' => 'yundun-mss:GetDocumentPage', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ 'apiName' => 'GetRecentDocument', 'description' => '', 'operationType' => 'get', 'ramAction' => [ 'action' => 'yundun-mss:GetRecentDocument', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ ['validationType' => 'always', 'product' => 'Mssp', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], 'resourceTypes' => [], ], ];