investigations

Documentation

Index

• Variables
• type AlertsOutput
• type EventsOutput
• type GenesisAlertsOutput
• type GenesisEventsOutput
• type GetInvestigationInput
• type IInvestigationSvc
• type InvestigationOutput
• type InvestigationSvc
  • func NewInvestigationSvc(c *client.Client, serviceName string) *InvestigationSvc
  • func (t *InvestigationSvc) GetInvestigation(in *GetInvestigationInput, rf graphql.ResponseFields, ...) (*InvestigationOutput, error)

Variables

var (
	DefaultURL                           = "https://api.ctpx.secureworks.com/graphql"
	DefaultFields graphql.ResponseFields = `` /* 229-byte string literal not displayed */

)

Types

type AlertsOutput

type AlertsOutput struct {
	ID string `json:"id"`
}

type EventsOutput

type EventsOutput struct {
	ID string `json:"id"`
}

type GenesisAlertsOutput

type GenesisAlertsOutput struct {
	ID string `json:"id"`
}

type GenesisEventsOutput

type GenesisEventsOutput struct {
	ID string `json:"id"`
}

type GetInvestigationInput

type GetInvestigationInput struct {
	TenantID string
	ID       string
}

type IInvestigationSvc

type IInvestigationSvc interface {
	GetInvestigation(*GetInvestigationInput, graphql.ResponseFields, ...graphql.RequestOption) (*InvestigationOutput, error)
}

IInvestigationSvc defines what the the Investigation API can do

type InvestigationOutput

type InvestigationOutput struct {
	ID            string                `json:"id"`
	CreatedAt     string                `json:"created_at"`
	CreatedBy     string                `json:"created_by"`
	UpdatedAt     string                `json:"updated_at"`
	TenantID      string                `json:"tenant_id"`
	Description   string                `json:"description"`
	Status        string                `json:"status"`
	KeyFindings   string                `json:"key_findings"`
	AssigneeID    string                `json:"assignee_id"`
	GenesisAlerts []GenesisAlertsOutput `json:"genesis_alerts"`
	GenesisEvents []GenesisEventsOutput `json:"genesis_events"`
	Alerts        []AlertsOutput        `json:"alerts"`
	Events        []EventsOutput        `json:"events"`
	Priority      int                   `json:"priority"`
	Type          string                `json:"type"`
}

type InvestigationSvc

type InvestigationSvc struct {
	// contains filtered or unexported fields
}

InvestigationsSvc is the concrete implementation of the interface against the real api

func NewInvestigationSvc

func NewInvestigationSvc(c *client.Client, serviceName string) *InvestigationSvc

NewInvestigationsSvc takes a client from `client` package -- see examples/notifications.go for an example

func (*InvestigationSvc) GetInvestigation

func (t *InvestigationSvc) GetInvestigation(in *GetInvestigationInput, rf graphql.ResponseFields, opts ...graphql.RequestOption) (*InvestigationOutput, error)