{"type":"api","title":"Activity AMP Retrospective","meta":{"id":"/apps/pubhub/media/legacy-umbrella-api/1f4bc296b06b13bab942ef791a49deeed880a9de/ca1cb6ac-c651-3cb6-9746-527b35467f3c","info":{"title":"Reporting API","description":"The Reporting API provides the data to generate the reports as seen on the Umbrella dashboard.","version":"1.0.0","contact":{"name":"Cloud Security Developer Community"}},"security":[{"oauthFlow":[]}],"tags":[{"name":"Activity"},{"name":"Top Identities"},{"name":"Identity Distribution"},{"name":"Top Destinations"},{"name":"Top Categories"},{"name":"Top Event Types"},{"name":"Top DNS query types"},{"name":"Organization Requests by Hour"},{"name":"Organization Requests by Timerange"},{"name":"Organization Requests by Hour and Category"},{"name":"Organization Requests by Timerange and Category"},{"name":"Deployment Status"},{"name":"MSP Deployment Status"},{"name":"MSP Requests by Hour"},{"name":"MSP Requests by Timerange"},{"name":"MSP Requests by Organization"},{"name":"MSP Requests by Category"},{"name":"MSP Requests by Destination"},{"name":"MSP Category Requests by Organization"},{"name":"Bandwidth by Hour"},{"name":"Bandwidth by Timerange"},{"name":"Top Files"},{"name":"Total Requests"},{"name":"Top Threats"},{"name":"Top Threat Types"},{"name":"Utility"},{"name":"Top IPs"},{"name":"Summary"},{"name":"Summaries by Category"},{"name":"Summaries by Destination"},{"name":"Summaries by Rule (Intrusion)"},{"name":"Remote Access"}],"x-parser-conf":{"oAuth2":{"clientId":"","clientSecret":"","proxyEnabled":true},"meta":{"useProxy":true}},"openapi":"3.0.1","servers":[{"url":"https://reports.api.umbrella.com/{basePath}","variables":{"basePath":{"default":"v2"}}}],"securitySchemes":{"oauthFlow":{"type":"oauth2","description":"client credential flow","flows":{"clientCredentials":{"tokenUrl":"https://management.api.umbrella.com/auth/v2/oauth2/token","scopes":{}}}}}},"spec":{"tags":["Activity"],"summary":"Activity AMP Retrospective","description":"List all AMP retrospective entries within timeframe.","operationId":"getActivityAmpRetrospective","parameters":[{"name":"organizationid","in":"path","description":"The organization ID","required":true,"schema":{"type":"number"},"example":1234567,"$$ref":"#/components/parameters/organizationIdParam"},{"name":"from","in":"query","description":"A timestamp or relative time string (for example: '-1days').\nFilter for data that appears after this time.","required":true,"schema":{"type":"string"},"example":"1639146300000","$$ref":"#/components/parameters/fromParam"},{"name":"to","in":"query","description":"A timestamp or relative time string (for example: 'now').\nFilter for data that appears before this time.","required":true,"schema":{"type":"string"},"example":"1640010300000","$$ref":"#/components/parameters/toParam"},{"name":"offset","in":"query","description":"A number that represents an index into the collection.","schema":{"type":"number"},"example":0,"$$ref":"#/components/parameters/offsetParam"},{"name":"limit","in":"query","description":"The maximum number of records to return from the collection.","required":true,"schema":{"type":"number"},"example":100,"$$ref":"#/components/parameters/limitParam"},{"name":"ampdisposition","in":"query","description":"An AMP disposition string or a comma-delimited list of AMP disposition string.","schema":{"type":"string"},"example":"clean,malicious,unknown","$$ref":"#/components/parameters/ampDispositionParam"},{"name":"sha256","in":"query","description":"A SHA-256 hash","schema":{"type":"string"},"example":"ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad","$$ref":"#/components/parameters/sha256Param"}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"type":"array","items":{"type":"object","properties":{"timestamp":{"type":"number","description":"timestamp in ms","example":1594557263000,"$$ref":"#/components/schemas/Timestamp"},"firstseenat":{"type":"number","description":"timestamp"},"disposition":{"type":"string","description":"disposition for entry"},"score":{"type":"number","description":"score for entry"},"hostname":{"type":"string","description":"hostname for entry"},"malwarename":{"type":"string","description":"malware name for entry"},"sha256":{"type":"string","description":"sha256 for entry"}},"required":["disposition","firstseenat","hostname","malwarename","score","sha256","timestamp"],"example":{"timestamp":1548311506,"firstseenat":1548311506,"disposition":"clean","score":10,"hostname":"google.com","malwarename":"malware","sha256":"9495b6c155044053953efe30ebaf804780c114e7b721b14f6a5b0a782769696e"},"$$ref":"#/components/schemas/ActivityAMPRetro"}},"meta":{"type":"object","example":{},"$$ref":"#/components/schemas/Meta"}},"required":["data","meta"]},"example":{"data":[{"timestamp":1548311506,"firstseenat":1548311506,"disposition":"clean","score":10,"hostname":"google.com","malwarename":"malware","sha256":"9495b6c155044053953efe30ebaf804780c114e7b721b14f6a5b0a782769696e"}],"meta":{}}}}},"400":{"description":"Invalid request","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}},"example":{"message":"Invalid request"}}}},"$$ref":"#/components/responses/400Error"},"401":{"description":"Unauthorized request","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}},"example":{"message":"Unauthorized request"}}}},"$$ref":"#/components/responses/401Error"},"403":{"description":"Forbidden","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}},"example":{"message":"Forbidden"}}}},"$$ref":"#/components/responses/403Error"},"404":{"description":"Not Found","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}},"example":{"message":"Not Found"}}}},"$$ref":"#/components/responses/404Error"},"500":{"description":"Server error","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}},"example":{"message":"Server error"}}}},"$$ref":"#/components/responses/500Error"}},"__originalOperationId":"getActivityAmpRetrospective","security":[{"oauthFlow":[]}],"method":"get","path":"/organizations/{organizationid}/activity/amp-retrospective"}}