{
  "opencollection": "1.0.0",
  "info": {
    "name": "Malwarebytes Suspicious Activity API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Suspicious Activity",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Suspicious activity of the account",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/sa",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "sort_field",
                "value": "",
                "type": "query",
                "description": "Sort field"
              },
              {
                "name": "sort_direction",
                "value": "",
                "type": "query",
                "description": "Sort direction"
              },
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              },
              {
                "name": "since",
                "value": "",
                "type": "query",
                "description": "Since (Ex. \"2020-03-23T17:23:17.860482Z\")"
              },
              {
                "name": "before",
                "value": "",
                "type": "query",
                "description": "Before (Ex. \"2020-03-23T17:23:17.860482Z\")"
              },
              {
                "name": "group_ids",
                "value": "",
                "type": "query",
                "description": "Group ID"
              },
              {
                "name": "per_page",
                "value": "",
                "type": "query",
                "description": "Page size"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Fetch suspicious activity records of the account."
        },
        {
          "info": {
            "name": "Suspicious activity process graph",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/nebula/v1/sa/:id/process_graph",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "ID of suspicious activity"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Fetch process graph of suspicious activity."
        },
        {
          "info": {
            "name": "Suspicious activity details",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/nebula/v1/sa/details",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              },
              {
                "name": "accountid",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Fetch details of suspicious activity."
        },
        {
          "info": {
            "name": "Suspicious activity of the account",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/sa",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "sort_field",
                "value": "",
                "type": "query",
                "description": "Sort field"
              },
              {
                "name": "sort_direction",
                "value": "",
                "type": "query",
                "description": "Sort direction"
              },
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              },
              {
                "name": "since",
                "value": "",
                "type": "query",
                "description": "Since (Ex. \"2020-03-23T17:23:17.860482Z\")"
              },
              {
                "name": "before",
                "value": "",
                "type": "query",
                "description": "Before (Ex. \"2020-03-23T17:23:17.860482Z\")"
              },
              {
                "name": "group_ids",
                "value": "",
                "type": "query",
                "description": "Group ID (Ex. \"9256034b-7967-4253-a5d9-260663e4fa4f\")"
              },
              {
                "name": "per_page",
                "value": "",
                "type": "query",
                "description": "Page size"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Fetch suspicious activity records of the account."
        },
        {
          "info": {
            "name": "Suspicious activity process graph",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/sa/:id/process_graph",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account_id",
                "value": "",
                "type": "path",
                "description": "Valid Account UUID"
              },
              {
                "name": "id",
                "value": "",
                "type": "path",
                "description": "ID of suspicious activity"
              }
            ],
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Fetch process graph of suspicious activity."
        },
        {
          "info": {
            "name": "Placeholder. Please extend this",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/sa/close",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Placeholder. Please extend this"
        },
        {
          "info": {
            "name": "Suspicious activity details",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/sa/details",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "next_cursor",
                "value": "",
                "type": "query",
                "description": "The pagination cursor for next set of results. For further documentation, check Pagination section."
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Fetch details of suspicious activity."
        },
        {
          "info": {
            "name": "Placeholder. Please extend this",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/sa/open",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Placeholder. Please extend this"
        },
        {
          "info": {
            "name": "Placeholder. Please extend this",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.threatdown.com/oneview/v1/accounts/:account_id/sa/remediate",
            "headers": [
              {
                "name": "authorization",
                "value": ""
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "oauth2",
              "flow": "client_credentials",
              "accessTokenUrl": "/token",
              "credentials": {
                "clientId": "{{clientId}}",
                "clientSecret": "{{clientSecret}}"
              }
            }
          },
          "docs": "Placeholder. Please extend this"
        }
      ]
    }
  ],
  "bundled": true
}