OpenAPI Specification
openapi: 3.0.3
info:
title: APISec Management account dataasset/tracing/download API
version: '26.05'
description: Generated from APISec skyview APIView classes.
tags:
- name: dataasset/tracing/download
description: 数据资产/溯源/下载
paths:
/dataasset/tracing/download:
post:
summary: tracing文件导出
deprecated: false
description: ''
tags:
- dataasset/tracing/download
parameters:
- name: X-CS-Header-App
in: header
description: 应用id
required: true
example: '{{app}}'
schema:
type: string
- name: X-CS-Header-Company
in: header
description: 公司id
required: true
example: '{{company_id}}'
schema:
type: string
- name: X-CS-Header-Crypt
in: header
description: 加密算法，请参考：https://servaltech.feishu.cn/docs/doccnQCZ2cw32uazgNSO0DFwceb
required: true
example: ''
schema:
type: string
- name: If-None-Match
in: header
description: 对于支持「ETAG」的接口，将上一次请求的响应header的Etag，填入到下一次请求。若匹配，则返回304（无变更），否则会返回新版本的数据 + 新Etag
required: true
example: string
schema:
type: string
- name: X-CS-Header-Debug
in: header
description: ''
required: true
example: '{{debug}}'
schema:
type: string
- name: Accept-Language
in: header
description: ''
required: true
example: zh
schema:
type: string
- name: X-Cs-Header-Timezone
in: header
description: ''
required: true
example: Asia/Shanghai
schema:
type: string
- name: Content-Type
in: header
description: ''
required: true
example: application/json
schema:
type: string
- name: Accept
in: header
description: ''
required: true
example: application/json
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties:
file_trace_id:
type: string
name:
type: string
output:
type: object
properties:
ext:
type: string
fields:
type: array
items:
type: object
properties:
name:
type: string
display_name:
type: string
required:
- name
- display_name
required:
- ext
- fields
queries:
type: array
items: {}
required:
- file_trace_id
- name
- output
- queries
example:
file_trace_id: a341dfca-1bfcfcbe-000000000000000f-00000194455ccdad
name: asdasd
output:
ext: xlsx
fields:
- name: timestamp
display_name: 发生时间
- name: channel_name
display_name: 渠道名称
- name: staff_name
display_name: 员工姓名
- name: staff_number
display_name: 员工工号
- name: device_code
display_name: 终端ID
- name: filename
display_name: 文件名
- name: cl_name
display_name: 数据分类
- name: uid
display_name: 日志ID
- name: file_suffix
display_name: 文件后缀
- name: data_level
display_name: 数据分级
- name: risk_level
display_name: 风险等级
- name: staff_code
display_name: 员工账户
- name: staff_tags
display_name: 员工标签
- name: dept_names
display_name: 部门名称
- name: dept_paths
display_name: 部门路径
- name: ip_address
display_name: IP地址
- name: console_user
display_name: 系统账户
- name: os_name
display_name: 操作系统
- name: policy_name
display_name: 策略名称
- name: action
display_name: 处置动作
- name: status
display_name: 事件状态
- name: is_blocked
display_name: 是否阻断
- name: filepath
display_name: 文件路径
- name: md5_hash
display_name: 文件MD5
- name: file_type
display_name: 文件类型
- name: filesize
display_name: 文件大小
- name: is_password_protected
display_name: 是否加密
- name: extract_file
display_name: 是否上传固证
- name: data_level_name
display_name: 数据分级名称
- name: metasource.source.display_name
display_name: 数据来源
- name: hostname
display_name: 主机名
- name: mac
display_name: MAC地址
- name: meta_original.process_name
display_name: 文件来源进程名
- name: meta_original.urls
display_name: 文件来源URL
- name: llm.has_cls
display_name: AI 分类
- name: file_analyse.summary
display_name: 内容摘要
- name: file_analyse.context_shot
display_name: 命中详情
- name: app_info.current_m365_account
display_name: 发送账号
- name: app_info.to_m365_account
display_name: 接收账号
queries: []
responses:
'200':
description: ''
content:
application/json:
schema:
type: object
properties:
code:
type: integer
msg:
type: string
data:
type: object
properties:
index:
type: array
items:
type: string
page:
type: integer
limit:
type: integer
search_total:
type: integer
total:
type: integer
search_after:
type: array
items:
type: integer
results:
type: array
items:
type: object
properties:
staff_name:
type: string
console_user:
type: string
md5_hash:
type: string
channel:
type: string
has_cls:
type: boolean
dept_paths:
type: array
items:
type: string
data_level:
type: integer
staff_number:
type: string
dept_names:
type: array
items:
type: string
hostname:
type: string
filepath:
type: string
staff_tags:
type: array
items: {}
cl_id:
type: string
file_type:
type: string
staff_id:
type: string
action:
type: string
app_info:
type: object
properties: {}
file_trace_id:
type: string
os_friendly_name:
type: string
file_updated_timestamp:
type: string
file_type_categories:
type: array
items: {}
device_id:
type: string
meta_original:
type: array
items:
type: object
properties:
process_name:
type: string
required:
- process_name
file_trace_flags:
type: string
simhash:
type: integer
expand:
type: object
properties:
rule_version:
type: object
properties:
cond_version:
type: integer
policy_version:
type: integer
filetype_version:
type: integer
dc_version:
type: integer
dc_ticket:
type: string
cond_ticket:
type: string
policy_ticket:
type: string
ms_version:
type: integer
version:
type: integer
required:
- cond_ticket
- cond_version
- dc_ticket
- dc_version
- filetype_version
- ms_version
- policy_ticket
- policy_version
- version
evidence_info:
type: object
properties:
file:
type: string
nullable: true
screen_recording:
type: 'null'
screenshot:
type: string
nullable: true
required:
- file
- screenshot
- screen_recording
screen_recording:
type: boolean
screenshot:
type: boolean
required:
- rule_version
- screen_recording
- screenshot
- evidence_info
filename:
type: string
file_suffix:
type: string
file_updated_time:
type: integer
file_policies:
type: array
items:
type: object
properties:
file_created_timestamp:
type: string
file_updated_timestamp:
type: string
file_type_categories:
type: array
items:
type: string
policy_id:
type: string
md5_hash:
type: string
is_hidden:
type: boolean
policy_name:
type: string
filesize:
type: integer
policy_group_id:
type: string
policy_group_name:
type: string
risk_level:
type: integer
classifications:
type: array
items:
type: object
properties:
uid:
type: string
name:
type: string
data_level_name:
type: string
data_level:
type: integer
required:
- uid
- name
- data_level_name
- data_level
filename:
type: string
filepath:
type: string
is_compressed:
type: boolean
file_suffix:
type: string
file_type:
type: string
file_updated_time:
type: integer
is_password_protected:
type: boolean
file_description:
type: string
action:
type: string
risk_name:
type: string
file_created_time:
type: integer
required:
- file_created_timestamp
- file_updated_timestamp
- file_type_categories
- md5_hash
- policy_id
- is_hidden
- policy_name
- filesize
- policy_group_id
- policy_group_name
- risk_level
- classifications
- filename
- filepath
- is_compressed
- file_suffix
- file_type
- file_updated_time
- is_password_protected
- file_description
- action
- risk_name
- file_created_time
device_code:
type: string
extract_file:
type: boolean
file_description:
type: string
data_level_name:
type: string
risk_name:
type: string
staff_email:
type: string
status:
type: string
file_created_time:
type: integer
file_created_timestamp:
type: string
policy_id:
type: string
dept_ids:
type: array
items:
type: string
data_level_names:
type: array
items:
type: string
is_hidden:
type: boolean
filesize:
type: integer
mac:
type: string
policy_group_id:
type: string
nullable: true
is_compressed:
type: boolean
pre_file_trace_id:
type: string
data_levels:
type: array
items:
type: integer
timestamp:
type: string
channel_name:
type: string
file_trace_flags_hash:
type: string
cl_name:
type: string
company_id:
type: string
policy_name:
type: string
staff_code:
type: string
created_timestamp:
type: string
ip_address:
type: string
cl_ids:
type: array
items:
type: string
policy_group_name:
type: string
nullable: true
agent_version:
type: string
risk_level:
type: integer
is_blocked:
type: boolean
event_id:
type: string
'@timestamp':
type: integer
is_password_protected:
type: boolean
os_name:
type: string
metasource:
type: array
items:
type: object
properties:
original:
type: object
properties:
process_name:
type: string
required:
- process_name
source:
type: array
items: {}
category:
type: string
version:
type: integer
required:
- original
- source
- category
- version
time:
type: integer
category:
type: string
operation:
type: string
staff_tag_ids:
type: array
items: {}
cl_names:
type: array
items:
type: string
uid:
type: string
_type:
type: string
_index:
type: string
_score:
type: 'null'
categories:
type: array
items:
type: string
devices:
type: array
items:
type: object
properties:
device_id:
type: string
device_code:
type: string
ip_address:
type: string
console_user:
type: string
os_name:
type: string
os_icon:
type: array
items:
type: string
staff_id:
type: string
staff_name:
type: string
dept_names:
type: array
items:
type: string
dept_paths:
type: array
items:
type: string
required:
- device_id
- device_code
- ip_address
- console_user
- os_name
- os_icon
- staff_id
- staff_name
- dept_names
- dept_paths
classifications:
type: array
items:
type: object
properties:
uid:
type: string
name:
type: string
data_level:
type: integer
data_level_name:
type: string
required:
- uid
- name
- data_level
- data_level_name
filenames:
type: array
items:
type: string
filepaths:
type: array
items:
type: string
last_seen:
type: string
first_seen:
type: string
channel_account:
type: string
file_trace_operation:
type: string
required:
- staff_name
- console_user
- md5_hash
- channel
- has_cls
- dept_paths
- data_level
- staff_number
- dept_names
- hostname
- filepath
- staff_tags
- cl_id
- file_type
- staff_id
- action
- app_info
- file_trace_id
- os_friendly_name
- file_updated_timestamp
- file_type_categories
- device_id
- meta_original
- file_trace_flags
- simhash
- expand
- filename
- file_suffix
- device_code
- file_policies
- file_updated_time
- extract_file
- file_description
- data_level_name
- risk_name
- staff_email
- file_created_time
- status
- file_created_timestamp
- policy_id
- dept_ids
- data_level_names
- is_hidden
- filesize
- mac
- policy_group_id
- is_compressed
- pre_file_trace_id
- data_levels
- timestamp
- channel_name
- file_trace_flags_hash
- cl_name
- company_id
- policy_name
- staff_code
- created_timestamp
- ip_address
- cl_ids
- policy_group_name
- risk_level
- agent_version
- is_blocked
- event_id
- '@timestamp'
- is_password_protected
- os_name
- metasource
- time
- category
- operation
- staff_tag_ids
- cl_names
- uid
- _type
- _index
- _score
- categories
- devices
- classifications
- filenames
- filepaths
- last_seen
- first_seen
required:
- index
- page
- limit
- search_total
- total
- search_after
- results
required:
- code
- msg
- data
example:
code: 0
msg: 正常
data:
index:
- qzhddr_data_assets
page: 1
limit: 100
search_total: 3
total: 3
search_after:
- 1736330497000
results:
- staff_name: 周周
console_user: serval-L410\root
md5_hash: ''
channel: feishu
has_cls: true
dept_paths:
- default/testcase
data_level: 3
staff_number: fff449967e237d65
dept_names:
- testcase
hostname: serval-L410
filepath: /home/serval/下载/http.docx
staff_tags: []
cl_id: 959515cc-75bd-491b-aa4d-083d527233a7
file_type: docx
staff_id: ca20ce1f-8b98-4cb8-ace8-0021e764d9ef
action: alert
app_info: {}
file_trace_id: a341dfca-1bfcfcbe-000000000000000f-00000194455ccdad
os_friendly_name: Kylin V10 SP1
file_updated_timestamp: '2025-01-08T18:01:37+08:00'
file_type_categories: []
device_id: 7093837d-3eb9-4d5a-9ddf-44514e62dcd2
meta_original:
- process_name: baidunetdisk
file_trace_flags: CSdGNxmAXOgtas4LIW-oLEnacVg6jIclg@V2_knMRcuPwlf5z9BWQnWsTfeNF9ioQGN9@5@M9MJaLK1ZkV870_yLAJ6jlqsg@3B3GjKbrEE1mrCvJv2-83
simhash: 4660575572712377000
expand:
rule_version:
cond_version: 37
policy_version: 277
# --- truncated at 32 KB (53 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/chaitin/refs/heads/main/openapi/chaitin-dataasset-tracing-download-api-openapi.yml