Chaitin Tech policylog/channel/{event_id}/fileflow API
日志中心/通道/event_id 参数/文件流转
OpenAPI Specification
openapi: 3.0.3
info:
title: APISec Management account policylog/channel/{event_id}/fileflow API
version: '26.05'
description: Generated from APISec skyview APIView classes.
tags:
- name: policylog/channel/{event_id}/fileflow
description: 日志中心/通道/event_id 参数/文件流转
paths:
/policylog/channel/{event_id}/fileflow:
post:
summary: 流转分析
deprecated: false
description: ''
tags:
- policylog/channel/{event_id}/fileflow
parameters:
- name: event_id
in: path
description: ''
required: true
example: vi4C94sBgA2us7afst
schema:
type: string
- name: X-CS-Header-App
in: header
description: 应用id
required: true
example: '{{app}}'
schema:
type: string
- name: X-CS-Header-Company
in: header
description: 公司id
required: true
example: '{{company_id}}'
schema:
type: string
- name: X-CS-Header-Crypt
in: header
description: 加密算法，请参考：https://servaltech.feishu.cn/docs/doccnQCZ2cw32uazgNSO0DFwceb
required: true
example: ''
schema:
type: string
- name: If-None-Match
in: header
description: 对于支持「ETAG」的接口，将上一次请求的响应header的Etag，填入到下一次请求。若匹配，则返回304（无变更），否则会返回新版本的数据 + 新Etag
required: true
example: string
schema:
type: string
- name: X-CS-Header-Debug
in: header
description: ''
required: true
example: '{{debug}}'
schema:
type: string
- name: Accept-Language
in: header
description: ''
required: true
example: zh
schema:
type: string
- name: X-Cs-Header-Timezone
in: header
description: ''
required: true
example: Asia/Shanghai
schema:
type: string
- name: Accept
in: header
description: ''
required: true
example: application/json
schema:
type: string
responses:
'200':
description: ''
content:
application/json:
schema:
type: object
properties:
code:
type: integer
msg:
type: string
data:
type: object
properties:
edges:
type: array
items:
type: object
properties:
target:
type: string
source:
type: string
value:
type: object
properties:
p_user:
type: string
device_code:
type: string
app_version:
type: string
os_name:
type: string
is_sign_valid:
type: boolean
p_name:
type: string
agent_version:
type: string
app_account:
type: string
operation:
type: string
p_path:
type: string
device_id:
type: string
os_friendly_name:
type: string
staff_id:
type: string
staff_name:
type: string
occur_time:
type: string
ip_address:
type: string
console_user:
type: string
app_name:
type: string
required:
- p_user
- device_code
- app_version
- os_name
- is_sign_valid
- p_name
- agent_version
- app_account
- operation
- p_path
- device_id
- os_friendly_name
- staff_id
- staff_name
- occur_time
- ip_address
- console_user
- app_name
required:
- target
- source
- value
nodes:
type: array
items:
type: object
properties:
uid:
type: string
is_curr:
type: boolean
value:
type: object
properties:
file_suffix:
type: string
md5_hash:
type: string
file_type:
type: string
device_id:
type: string
is_password_protected:
type: boolean
file_size:
type: integer
file_name:
type: string
file_path:
type: string
node_type:
type: string
updated_time:
type: string
created_time:
type: string
p_user:
type: string
app_version:
type: string
p_name:
type: string
app_account:
type: string
app_name:
type: string
required:
- p_user
- app_version
- p_name
- app_account
- node_type
- app_name
required:
- is_curr
- uid
- value
required:
- edges
- nodes
required:
- code
- msg
- data
example:
code: 0
msg: success
data:
edges:
- target: '1'
source: '0'
value:
p_user: '-'
device_code: PC-000226
app_version: '-'
os_name: Windows
is_sign_valid: true
p_name: '-'
agent_version: 3.2.203
app_account: '-'
operation: 外发
p_path: '-'
device_id: 251c0826-b9bc-4f6c-b781-d346fe9b32c9
os_friendly_name: Windows 10 CoreCountrySpecific (10.0.19045)
staff_id: ''
staff_name: '-'
occur_time: '2024-05-08T03:18:43Z'
ip_address: 192.168.96.201
console_user: lianb@DESKTOP-PNED9SM
app_name: 飞书
- target: '0'
source: '2'
value:
p_user: '-'
device_code: PC-000226
app_version: '-'
os_name: Windows
is_sign_valid: true
p_name: '-'
agent_version: 3.2.203
app_account: '-'
operation: 来源
p_path: '-'
device_id: 251c0826-b9bc-4f6c-b781-d346fe9b32c9
os_friendly_name: Windows 10 CoreCountrySpecific (10.0.19045)
staff_id: ''
staff_name: '-'
occur_time: '2024-05-08T03:18:43Z'
ip_address: 192.168.96.201
console_user: lianb@DESKTOP-PNED9SM
app_name: 飞书
- target: '0'
source: '3'
value:
p_user: '-'
device_code: PC-000226
app_version: '-'
os_name: Windows
is_sign_valid: true
p_name: '-'
agent_version: 3.2.203
app_account: '-'
operation: 来源
p_path: '-'
device_id: 251c0826-b9bc-4f6c-b781-d346fe9b32c9
os_friendly_name: Windows 10 CoreCountrySpecific (10.0.19045)
staff_id: ''
staff_name: '-'
occur_time: '2024-05-08T03:18:43Z'
ip_address: 192.168.96.201
console_user: lianb@DESKTOP-PNED9SM
app_name: 飞书
nodes:
- uid: '0'
is_curr: true
value:
file_suffix: txt
md5_hash: 60453a859df4e4c3ac39112846439832
file_type: txt
device_id: 251c0826-b9bc-4f6c-b781-d346fe9b32c9
is_password_protected: false
file_size: 144
file_name: 4.txt
file_path: C:\Users\lianb\Downloads\4.txt
node_type: ueba
updated_time: '2024-05-08T03:05:16Z'
created_time: '2024-05-08T03:05:16Z'
- is_curr: false
uid: '1'
value:
p_user: '-'
app_version: '-'
p_name: '-'
app_account: '-'
node_type: ueba_general_process
app_name: 飞书
- is_curr: false
uid: '2'
value:
p_user: '-'
app_version: '-'
p_name: Feishu.exe
app_account: '-'
node_type: ueba_source
app_name: IM应用
- is_curr: false
uid: '3'
value:
p_user: '-'
app_version: '-'
p_name: Feishu.exe
app_account: '-'
node_type: ueba_source
app_name: IM应用-2
security: []