v20181115

package
v1.0.941 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jun 12, 2024 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

View Source 
const (

	// 内部系统错误，组件异常。
	INTERNALERROR_CACHEERR = "InternalError.CacheErr"

	// 内部系统错误，逻辑错误。
	INTERNALERROR_LOCALERR = "InternalError.LocalErr"

	// 内部系统错误，超时等异常。
	INTERNALERROR_TIMEOUT = "InternalError.Timeout"

	// 参数错误。
	INVALIDPARAMETER = "InvalidParameter"

	// 超过配额限制。
	LIMITEXCEEDED = "LimitExceeded"
)
View Source 
const APIVersion = "2018-11-15"

Variables

This section is empty.

Functions

This section is empty.

Types

type Client 

type Client struct {
	common.Client
}

func NewClient 

func NewClient(credential common.CredentialIface, region string, clientProfile *profile.ClientProfile) (client *Client, err error)

func NewClientWithSecretId 

func NewClientWithSecretId(secretId, secretKey, region string) (client *Client, err error)

Deprecated

func (*Client) DescribeDomainInfo 

func (c *Client) DescribeDomainInfo(request *DescribeDomainInfoRequest) (response *DescribeDomainInfoResponse, err error)

DescribeDomainInfo 提供域名相关的基础信息以及与攻击事件（团伙、家族）、恶意文件等相关联信息。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

func (*Client) DescribeDomainInfoWithContext added in v1.0.324 

func (c *Client) DescribeDomainInfoWithContext(ctx context.Context, request *DescribeDomainInfoRequest) (response *DescribeDomainInfoResponse, err error)

DescribeDomainInfo 提供域名相关的基础信息以及与攻击事件（团伙、家族）、恶意文件等相关联信息。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

func (*Client) DescribeFileInfo 

func (c *Client) DescribeFileInfo(request *DescribeFileInfoRequest) (response *DescribeFileInfoResponse, err error)

DescribeFileInfo 提供文件相关的基础信息以及与攻击事件（团伙、家族）、恶意文件等相关联信息。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

func (*Client) DescribeFileInfoWithContext added in v1.0.324 

func (c *Client) DescribeFileInfoWithContext(ctx context.Context, request *DescribeFileInfoRequest) (response *DescribeFileInfoResponse, err error)

DescribeFileInfo 提供文件相关的基础信息以及与攻击事件（团伙、家族）、恶意文件等相关联信息。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

func (*Client) DescribeIpInfo 

func (c *Client) DescribeIpInfo(request *DescribeIpInfoRequest) (response *DescribeIpInfoResponse, err error)

DescribeIpInfo 提供IP相关的基础信息以及与攻击事件（团伙、家族）、恶意文件等相关联信息。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

func (*Client) DescribeIpInfoWithContext added in v1.0.324 

func (c *Client) DescribeIpInfoWithContext(ctx context.Context, request *DescribeIpInfoRequest) (response *DescribeIpInfoResponse, err error)

DescribeIpInfo 提供IP相关的基础信息以及与攻击事件（团伙、家族）、恶意文件等相关联信息。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

func (*Client) DescribeThreatInfo 

func (c *Client) DescribeThreatInfo(request *DescribeThreatInfoRequest) (response *DescribeThreatInfoResponse, err error)

DescribeThreatInfo 提供IP和域名相关威胁情报信息查询，这些信息可以辅助检测失陷主机、帮助SIEM/SOC等系统做研判决策、帮助运营团队对设备报警的编排处理。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

func (*Client) DescribeThreatInfoWithContext added in v1.0.324 

func (c *Client) DescribeThreatInfoWithContext(ctx context.Context, request *DescribeThreatInfoRequest) (response *DescribeThreatInfoResponse, err error)

DescribeThreatInfo 提供IP和域名相关威胁情报信息查询，这些信息可以辅助检测失陷主机、帮助SIEM/SOC等系统做研判决策、帮助运营团队对设备报警的编排处理。

可能返回的错误码: 

INTERNALERROR_CACHEERR = "InternalError.CacheErr"
INTERNALERROR_LOCALERR = "InternalError.LocalErr"
INTERNALERROR_TIMEOUT = "InternalError.Timeout"
INVALIDPARAMETER = "InvalidParameter"
LIMITEXCEEDED = "LimitExceeded"

type DescribeDomainInfoRequest 

type DescribeDomainInfoRequest struct {
	*tchttp.BaseRequest

	// 要查询的域名
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

func NewDescribeDomainInfoRequest 

func NewDescribeDomainInfoRequest() (request *DescribeDomainInfoRequest)

func (*DescribeDomainInfoRequest) FromJsonString 

func (r *DescribeDomainInfoRequest) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeDomainInfoRequest) ToJsonString 

func (r *DescribeDomainInfoRequest) ToJsonString() string

type DescribeDomainInfoRequestParams added in v1.0.426 

type DescribeDomainInfoRequestParams struct {
	// 要查询的域名
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

Predefined struct for user

type DescribeDomainInfoResponse 

type DescribeDomainInfoResponse struct {
	*tchttp.BaseResponse
	Response *DescribeDomainInfoResponseParams `json:"Response"`
}

func NewDescribeDomainInfoResponse 

func NewDescribeDomainInfoResponse() (response *DescribeDomainInfoResponse)

func (*DescribeDomainInfoResponse) FromJsonString 

func (r *DescribeDomainInfoResponse) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeDomainInfoResponse) ToJsonString 

func (r *DescribeDomainInfoResponse) ToJsonString() string

type DescribeDomainInfoResponseParams added in v1.0.426 

type DescribeDomainInfoResponseParams struct {
	// 是否有数据，0代表有数据，1代表没有数据
	ReturnCode *uint64 `json:"ReturnCode,omitnil,omitempty" name:"ReturnCode"`

	// 判定结果，如：black、white、grey
	Result *string `json:"Result,omitnil,omitempty" name:"Result"`

	// 置信度，取值0-100
	Confidence *uint64 `json:"Confidence,omitnil,omitempty" name:"Confidence"`

	// 威胁类型。
	// botnet = 僵尸网络
	// trojan = 木马
	// ransomware = 勒索软件
	// worm = 蠕虫
	// dga = 域名生成算法
	// c2 = c&c
	// compromised = 失陷主机
	// dynamicIP = 动态IP
	// proxy = 代理
	// idc = idc 机房
	// whitelist = 白名单
	// tor = 暗网
	// miner = 挖矿
	// maleware site = 恶意站点
	// malware IP = 恶意IP
	// 等等
	ThreatTypes []*string `json:"ThreatTypes,omitnil,omitempty" name:"ThreatTypes"`

	// 恶意标签，对应的团伙，家族等信息。
	Tags []*TagType `json:"Tags,omitnil,omitempty" name:"Tags"`

	// 对应的历史上的威胁情报事件
	Intelligences []*IntelligenceType `json:"Intelligences,omitnil,omitempty" name:"Intelligences"`

	// 情报相关的上下文
	Context *string `json:"Context,omitnil,omitempty" name:"Context"`

	// 唯一请求 ID，由服务端生成，每次请求都会返回（若请求因其他原因未能抵达服务端，则该次请求不会获得 RequestId）。定位问题时需要提供该次请求的 RequestId。
	RequestId *string `json:"RequestId,omitnil,omitempty" name:"RequestId"`
}

Predefined struct for user

type DescribeFileInfoRequest 

type DescribeFileInfoRequest struct {
	*tchttp.BaseRequest

	// 要查询文件的MD5
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

func NewDescribeFileInfoRequest 

func NewDescribeFileInfoRequest() (request *DescribeFileInfoRequest)

func (*DescribeFileInfoRequest) FromJsonString 

func (r *DescribeFileInfoRequest) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeFileInfoRequest) ToJsonString 

func (r *DescribeFileInfoRequest) ToJsonString() string

type DescribeFileInfoRequestParams added in v1.0.426 

type DescribeFileInfoRequestParams struct {
	// 要查询文件的MD5
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

Predefined struct for user

type DescribeFileInfoResponse 

type DescribeFileInfoResponse struct {
	*tchttp.BaseResponse
	Response *DescribeFileInfoResponseParams `json:"Response"`
}

func NewDescribeFileInfoResponse 

func NewDescribeFileInfoResponse() (response *DescribeFileInfoResponse)

func (*DescribeFileInfoResponse) FromJsonString 

func (r *DescribeFileInfoResponse) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeFileInfoResponse) ToJsonString 

func (r *DescribeFileInfoResponse) ToJsonString() string

type DescribeFileInfoResponseParams added in v1.0.426 

type DescribeFileInfoResponseParams struct {
	// 是否有数据，0代表有数据，1代表没有数据
	ReturnCode *uint64 `json:"ReturnCode,omitnil,omitempty" name:"ReturnCode"`

	// 判定结果，如：black、white、grey
	Result *string `json:"Result,omitnil,omitempty" name:"Result"`

	// 置信度，取值0-100
	Confidence *uint64 `json:"Confidence,omitnil,omitempty" name:"Confidence"`

	// 文件类型，文件hash
	// （md5,sha1,sha256）,文件大小等等文件
	// 基础信息
	FileInfo []*FileInfoType `json:"FileInfo,omitnil,omitempty" name:"FileInfo"`

	// 恶意标签，对应的团伙，家族等信息。
	Tags []*TagType `json:"Tags,omitnil,omitempty" name:"Tags"`

	// 对应的历史上的威胁情报事件
	Intelligences []*IntelligenceType `json:"Intelligences,omitnil,omitempty" name:"Intelligences"`

	// 情报相关的上下文
	Context *string `json:"Context,omitnil,omitempty" name:"Context"`

	// 唯一请求 ID，由服务端生成，每次请求都会返回（若请求因其他原因未能抵达服务端，则该次请求不会获得 RequestId）。定位问题时需要提供该次请求的 RequestId。
	RequestId *string `json:"RequestId,omitnil,omitempty" name:"RequestId"`
}

Predefined struct for user

type DescribeIpInfoRequest 

type DescribeIpInfoRequest struct {
	*tchttp.BaseRequest

	// 要查询的IP
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

func NewDescribeIpInfoRequest 

func NewDescribeIpInfoRequest() (request *DescribeIpInfoRequest)

func (*DescribeIpInfoRequest) FromJsonString 

func (r *DescribeIpInfoRequest) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeIpInfoRequest) ToJsonString 

func (r *DescribeIpInfoRequest) ToJsonString() string

type DescribeIpInfoRequestParams added in v1.0.426 

type DescribeIpInfoRequestParams struct {
	// 要查询的IP
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

Predefined struct for user

type DescribeIpInfoResponse 

type DescribeIpInfoResponse struct {
	*tchttp.BaseResponse
	Response *DescribeIpInfoResponseParams `json:"Response"`
}

func NewDescribeIpInfoResponse 

func NewDescribeIpInfoResponse() (response *DescribeIpInfoResponse)

func (*DescribeIpInfoResponse) FromJsonString 

func (r *DescribeIpInfoResponse) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeIpInfoResponse) ToJsonString 

func (r *DescribeIpInfoResponse) ToJsonString() string

type DescribeIpInfoResponseParams added in v1.0.426 

type DescribeIpInfoResponseParams struct {
	// 是否有数据，0代表有数据，1代表没有数据
	ReturnCode *uint64 `json:"ReturnCode,omitnil,omitempty" name:"ReturnCode"`

	// 判定结果，如：black、white、grey
	Result *string `json:"Result,omitnil,omitempty" name:"Result"`

	// 置信度，取值0-100
	Confidence *uint64 `json:"Confidence,omitnil,omitempty" name:"Confidence"`

	// 威胁类型。
	// botnet = 僵尸网络
	// trojan = 木马
	// ransomware = 勒索软件
	// worm = 蠕虫
	// dga = 域名生成算法
	// c2 = c&c
	// compromised = 失陷主机
	// dynamicIP = 动态IP
	// proxy = 代理
	// idc = idc 机房
	// whitelist = 白名单
	// tor = 暗网
	// miner = 挖矿
	// maleware site = 恶意站点
	// malware IP = 恶意IP
	// 等等
	ThreatTypes []*string `json:"ThreatTypes,omitnil,omitempty" name:"ThreatTypes"`

	// 恶意标签，对应的团伙，家族等信息。
	Tags []*TagType `json:"Tags,omitnil,omitempty" name:"Tags"`

	// 对应的历史上的威胁情报事件
	Intelligences []*IntelligenceType `json:"Intelligences,omitnil,omitempty" name:"Intelligences"`

	// 情报相关的上下文
	Context *string `json:"Context,omitnil,omitempty" name:"Context"`

	// 唯一请求 ID，由服务端生成，每次请求都会返回（若请求因其他原因未能抵达服务端，则该次请求不会获得 RequestId）。定位问题时需要提供该次请求的 RequestId。
	RequestId *string `json:"RequestId,omitnil,omitempty" name:"RequestId"`
}

Predefined struct for user

type DescribeThreatInfoRequest 

type DescribeThreatInfoRequest struct {
	*tchttp.BaseRequest

	// 查询对象，域名或IP
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 查询类型，当前取值为domain或ip
	Type *string `json:"Type,omitnil,omitempty" name:"Type"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

func NewDescribeThreatInfoRequest 

func NewDescribeThreatInfoRequest() (request *DescribeThreatInfoRequest)

func (*DescribeThreatInfoRequest) FromJsonString 

func (r *DescribeThreatInfoRequest) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeThreatInfoRequest) ToJsonString 

func (r *DescribeThreatInfoRequest) ToJsonString() string

type DescribeThreatInfoRequestParams added in v1.0.426 

type DescribeThreatInfoRequestParams struct {
	// 查询对象，域名或IP
	Key *string `json:"Key,omitnil,omitempty" name:"Key"`

	// 查询类型，当前取值为domain或ip
	Type *string `json:"Type,omitnil,omitempty" name:"Type"`

	// 附加字段，是否返回上下文。当为0时不返回上下文，当为1时返回上下文。
	Option *uint64 `json:"Option,omitnil,omitempty" name:"Option"`
}

Predefined struct for user

type DescribeThreatInfoResponse 

type DescribeThreatInfoResponse struct {
	*tchttp.BaseResponse
	Response *DescribeThreatInfoResponseParams `json:"Response"`
}

func NewDescribeThreatInfoResponse 

func NewDescribeThreatInfoResponse() (response *DescribeThreatInfoResponse)

func (*DescribeThreatInfoResponse) FromJsonString 

func (r *DescribeThreatInfoResponse) FromJsonString(s string) error

FromJsonString It is highly **NOT** recommended to use this function because it has no param check, nor strict type check

func (*DescribeThreatInfoResponse) ToJsonString 

func (r *DescribeThreatInfoResponse) ToJsonString() string

type DescribeThreatInfoResponseParams added in v1.0.426 

type DescribeThreatInfoResponseParams struct {
	// 是否有数据，0代表有数据，1代表没有数据
	ReturnCode *uint64 `json:"ReturnCode,omitnil,omitempty" name:"ReturnCode"`

	// 判定结果，如：black、white、grey
	Result *string `json:"Result,omitnil,omitempty" name:"Result"`

	// 置信度，取值0-100
	Confidence *uint64 `json:"Confidence,omitnil,omitempty" name:"Confidence"`

	// 威胁类型。
	// botnet = 僵尸网络
	// trojan = 木马
	// ransomware = 勒索软件
	// worm = 蠕虫
	// dga = 域名生成算法
	// c2 = c&c
	// compromised = 失陷主机
	// dynamicIP = 动态IP
	// proxy = 代理
	// idc = idc 机房
	// whitelist = 白名单
	// tor = 暗网
	// miner = 挖矿
	// maleware site = 恶意站点
	// malware IP = 恶意IP
	// 等等
	ThreatTypes []*string `json:"ThreatTypes,omitnil,omitempty" name:"ThreatTypes"`

	// 恶意标签，对应的团伙，家族等信息。
	Tags []*string `json:"Tags,omitnil,omitempty" name:"Tags"`

	// 当前状态
	// active = 活跃
	// sinkholed = sinkholed
	// inactive = 不活跃
	// unknown = 未知
	// expired = 过期
	Status *string `json:"Status,omitnil,omitempty" name:"Status"`

	// 情报相关的上下文，参数option=1 的时候提供
	// 每个数据默认为3 条
	Context *string `json:"Context,omitnil,omitempty" name:"Context"`

	// 唯一请求 ID，由服务端生成，每次请求都会返回（若请求因其他原因未能抵达服务端，则该次请求不会获得 RequestId）。定位问题时需要提供该次请求的 RequestId。
	RequestId *string `json:"RequestId,omitnil,omitempty" name:"RequestId"`
}

Predefined struct for user

type FileInfoType 

type FileInfoType struct {
	// 判定渠道
	DetectId *string `json:"DetectId,omitnil,omitempty" name:"DetectId"`

	// 检测优先级
	DetectPriority *string `json:"DetectPriority,omitnil,omitempty" name:"DetectPriority"`

	// 引擎优先级
	EnginePriority *string `json:"EnginePriority,omitnil,omitempty" name:"EnginePriority"`

	// 样本是否存在
	FileExist *string `json:"FileExist,omitnil,omitempty" name:"FileExist"`

	// 文件上传
	FileForceUpload *string `json:"FileForceUpload,omitnil,omitempty" name:"FileForceUpload"`

	// 文件大小
	FileSize *string `json:"FileSize,omitnil,omitempty" name:"FileSize"`

	// 文件上传时间
	FileupTime *string `json:"FileupTime,omitnil,omitempty" name:"FileupTime"`

	// 病毒文件全名
	FullVirusName *string `json:"FullVirusName,omitnil,omitempty" name:"FullVirusName"`

	// IDC位置
	IdcPosition *string `json:"IdcPosition,omitnil,omitempty" name:"IdcPosition"`

	// 文件md5值
	Md5Type *string `json:"Md5Type,omitnil,omitempty" name:"Md5Type"`

	// PE结构是否存在
	PeExist *string `json:"PeExist,omitnil,omitempty" name:"PeExist"`

	// PE结构上传
	PeForceUpload *string `json:"PeForceUpload,omitnil,omitempty" name:"PeForceUpload"`

	// 安全性等级
	SafeLevel *string `json:"SafeLevel,omitnil,omitempty" name:"SafeLevel"`

	// 扫描时间
	ScanModiTime *string `json:"ScanModiTime,omitnil,omitempty" name:"ScanModiTime"`

	// 子判定渠道
	SubdetectId *string `json:"SubdetectId,omitnil,omitempty" name:"SubdetectId"`

	// 病毒名
	UserDefName *string `json:"UserDefName,omitnil,omitempty" name:"UserDefName"`

	// 病毒类型
	VirusType *string `json:"VirusType,omitnil,omitempty" name:"VirusType"`

	// 白名单分数
	WhiteScore *string `json:"WhiteScore,omitnil,omitempty" name:"WhiteScore"`
}

type IntelligenceType 

type IntelligenceType struct {
	// 来源
	Source *string `json:"Source,omitnil,omitempty" name:"Source"`

	// 标记
	Stamp *string `json:"Stamp,omitnil,omitempty" name:"Stamp"`

	// 时间
	Time *uint64 `json:"Time,omitnil,omitempty" name:"Time"`
}

type TagType 

type TagType struct {
	// 标签
	Tag *string `json:"Tag,omitnil,omitempty" name:"Tag"`

	// 标签对应的中文解释
	Desc *string `json:"Desc,omitnil,omitempty" name:"Desc"`
}

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.