{"type":"model","meta":{"id":"/apps/pubhub/media/cisco-xdr-api-docs/f4e065ff5977829c89df289df08411f83205f526/b8e2f317-fdde-3c60-a473-916add6130ca","info":{"title":"XDR Findings Container API","version":"1.0.0"},"tags":[{"description":"Operations related to service healthcheck","name":"Healthcheck"},{"description":"Operations for internal use only","name":"Internal"}],"x-parser-conf":{"serverConfig":"select","overview":{"markdownPath":"reference/findings-intake/overview.md","uri":"findings-intake-api-guide"},"disableAuthEditing":true,"exampleAsDefault":true,"oAuth2":{"clientId":"client-546e34fc-c6bf-4951-ac69-f6d7987a7814","clientSecret":"MYw4_E_tBdFwUwrX6WFYKVD5LQrG2k7XrJ5J046wWE0s1gAKCxJ8VA","proxyEnabled":false},"meta":{"useProxy":true}},"openapi":"3.1.0","servers":[{"url":"https://findings.us.security.cisco.com"}],"securitySchemes":{"bearer":{"bearerFormat":"JWT","scheme":"bearer","type":"http"}}},"spec":{"additionalProperties":false,"properties":{"cc":{"description":"Items should be valid email addresses.","items":{"type":["string","null"]},"maxItems":50,"type":["array","null"]},"delivered_to_list":{"description":"Items should be valid email addresses.","items":{"type":["string","null"]},"maxItems":50,"type":["array","null"]},"files":{"items":{"additionalProperties":false,"properties":{"hashes":{"items":{"additionalProperties":false,"properties":{"algorithm":{"enum":["Unknown","MD5","SHA-1","SHA-256","SHA-512","CTPH","TLSH","quickXorHash","Other"],"type":"string"},"value":{"maxLength":128,"minLength":1,"type":"string"}},"required":["value"],"type":"object","$$ref":"#/components/schemas/Fingerprint"},"maxItems":10,"type":["array","null"]},"name":{"maxLength":255,"minLength":1,"type":"string"},"size":{"format":"int64","maximum":107374182400,"minimum":0,"type":"integer"},"type":{"enum":["Unknown","Regular File","Folder","Character Device","Block Device","Local Socket","Named Pipe","Symbolic Link","Other"],"type":"string"}},"required":["name"],"type":"object","$$ref":"#/components/schemas/File"},"maxItems":20,"type":["array","null"]},"from_list":{"description":"Items should be valid email addresses.","items":{"type":["string","null"]},"maxItems":10,"minItems":1,"type":["array","null"]},"message_uid":{"maxLength":255,"type":"string"},"raw_header":{"maxLength":10000,"type":"string"},"reply_to_mailboxes":{"items":{"type":"string"},"maxItems":10,"type":["array","null"]},"sender":{"description":"Email address of the sender.","type":["string","null"]},"subject":{"maxLength":998,"type":"string"},"to":{"description":"Items should be valid email addresses.","items":{"type":["string","null"]},"maxItems":50,"minItems":1,"type":["array","null"]},"urls":{"items":{"format":"uri","type":"string"},"maxItems":100,"type":["array","null"]},"x_originating_ip":{"description":"Identifying the emails originating IP address, either IPv4 or IPv6.","items":{"type":["string","null"]},"maxItems":10,"type":["array","null"]}},"required":["from_list","message_uid","to"],"type":"object","$$ref":"#/components/schemas/Email","title":"Email"}}