You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
name: string, Required. Name of the alert to get. Format: projects/{project}/alerts/{alert} (required)
878
+
x__xgafv: string, V1 error format.
879
+
Allowed values
880
+
1 - v1 error format
881
+
2 - v2 error format
882
+
883
+
Returns:
884
+
An object of the form:
885
+
886
+
{ # Stateful object representing a group of Findings. Key feature to an Alert is that it expresses the user's intent towards the findings of that group, even those that haven't occurred yet.
887
+
"aiSummary": "A String", # Optional. AI summary of the alert.
888
+
"audit": { # Tracks basic CRUD facts. # Output only. Audit information for the alert.
889
+
"createTime": "A String", # Output only. Time of creation.
890
+
"creator": "A String", # Output only. Agent that created or updated the record, could be a UserId or a JobId.
891
+
"updateTime": "A String", # Output only. Time of creation or last update.
892
+
"updater": "A String", # Output only. Agent that last updated the record, could be a UserId or a JobId.
893
+
},
894
+
"configurations": [ # Output only. The resource names of the Configurations bound to this alert. Format: projects/{project}/configurations/{configuration}
895
+
"A String",
896
+
],
897
+
"detail": { # Container for different types of alert details. # Output only. Details object for the alert, not all alerts will have a details object.
898
+
"dataLeak": { # Captures the specific details of Data Leak alert. # Data Leak alert detail type.
899
+
"discoveryDocumentIds": [ # Required. Array of ids to accommodate multiple discovery documents
900
+
"A String",
901
+
],
902
+
"severity": "A String", # Required. The severity of the Data Leak alert. Allowed values are: * `LOW` * `MEDIUM` * `HIGH` * `CRITICAL`
903
+
},
904
+
"detailType": "A String", # Output only. Name of the detail type. Will be set by the server during creation to the name of the field that is set in the detail union.
905
+
"initialAccessBroker": { # Captures the specific details of InitialAccessBroker (IAB) alert. # Initial Access Broker alert detail type.
906
+
"discoveryDocumentIds": [ # Required. Array of ids to accommodate multiple discovery documents
907
+
"A String",
908
+
],
909
+
"severity": "A String", # Required. The severity of the Initial Access Broker (IAB) alert. Allowed values are: * `LOW` * `MEDIUM` * `HIGH` * `CRITICAL`
910
+
},
911
+
"insiderThreat": { # Captures the specific details of InsiderThreat alert. # Insider Threat alert detail type.
912
+
"discoveryDocumentIds": [ # Required. Array of ids to accommodate multiple discovery documents
913
+
"A String",
914
+
],
915
+
"severity": "A String", # Required. The severity of the Insider Threat alert. Allowed values are: * `LOW` * `MEDIUM` * `HIGH` * `CRITICAL`
916
+
},
917
+
"targetTechnology": { # Contains details for a technology watchlist alert. # Technology Watchlist alert detail type.
918
+
"vulnerabilityMatch": { # Contains details about a vulnerability match. # Optional. The vulnerability match details.
919
+
"associations": [ # Optional. Associated threat actors, malware, etc. This is embedded as a snapshot because the details of the association at the time of the vulnerability match are important for context and reporting.
920
+
{ # Represents an association with a vulnerability.
921
+
"id": "A String", # Required. The ID of the association.
922
+
"type": "A String", # Required. The type of the association.
923
+
},
924
+
],
925
+
"collectionId": "A String", # Required. The collection ID of the vulnerability. Ex: "vulnerability--cve-2025-9876".
926
+
"cveId": "A String", # Required. The CVE ID of the vulnerability. Ex: "CVE-2025-9876". See https://www.cve.org/ for more information.
927
+
"cvss3Score": 3.14, # Required. The CVSS score of the vulnerability. Evaluates to CVSS v3 when available with a fallback to v2 and v4. Example: 6.4.
928
+
"description": "A String", # Required. A description of the vulnerability.
929
+
"disclosureTime": "A String", # Optional. The disclosure time of the vulnerability.
930
+
"epssScore": 3.14, # Optional. The EPSS score, representing the probability of exploitation. Example: 0.87.
931
+
"exploitationConsequences": [ # Optional. List of exploitation consequences for the vulnerability.
932
+
"A String",
933
+
],
934
+
"exploitationState": "A String", # Required. The exploitation state of the vulnerability.
935
+
"exploitationVectors": [ # Optional. List of exploitation vectors for the vulnerability.
936
+
"A String",
937
+
],
938
+
"matchedTechnologies": [ # Optional. The specific technologies from the configured watchlist that triggered the match. Ex: "Apache Struts".
939
+
"A String",
940
+
],
941
+
"priority": "A String", # Optional. The priority level of the vulnerability data. Ex: "P1".
942
+
"productFixes": [ # Optional. List of product fixes for the vulnerability.
943
+
{ # Contains details about a product fix.
944
+
"displayName": "A String", # Required. The name of the fix. Ex: "Magento".
945
+
"publishTime": "A String", # Optional. The published time of the fix.
946
+
"sourceId": "A String", # Required. The source ID of the fix. Ex: "APPSEC-1420".
947
+
"uri": "A String", # Optional. The URI of the fix.
948
+
},
949
+
],
950
+
"publicExploits": [ # Optional. List of public exploits.
951
+
{ # Contains details about a public exploit.
952
+
"exploitGrade": "A String", # Optional. The grade of the exploit. Ex: "non-weaponized".
953
+
"exploitName": "A String", # Required. The name of the exploit. Ex: "Magentounauth.php.txt".
954
+
"exploitReliability": "A String", # Optional. The reliability of the exploit. Ex: "Unreviewed".
955
+
"releaseTime": "A String", # Optional. The release time of the exploit.
956
+
"sizeBytes": "A String", # Optional. The size of the exploit.
957
+
"uri": "A String", # Optional. The URI of the exploit.
958
+
},
959
+
],
960
+
"publiclyAvailableExploit": True or False, # Output only. Whether a publicly available exploit exists.
961
+
"riskRating": "A String", # Required. The risk rating of the vulnerability.
962
+
"technologies": [ # Required. All technologies affected by the vulnerability. Ex: "Apache Struts".
963
+
"A String",
964
+
],
965
+
},
966
+
},
967
+
},
968
+
"displayName": "A String", # Output only. A short title for the alert.
969
+
"duplicateOf": "A String", # Output only. alert name of the alert this alert is a duplicate of. Format: projects/{project}/alerts/{alert}
970
+
"duplicatedBy": [ # Output only. alert names of the alerts that are duplicates of this alert. Format: projects/{project}/alerts/{alert}
971
+
"A String",
972
+
],
973
+
"etag": "A String", # Optional. If included when updating an alert, this should be set to the current etag of the alert. If the etags do not match, the update will be rejected and an ABORTED error will be returned.
974
+
"externalId": "A String", # Output only. External ID for the alert. This is used internally to provide protection against out of order updates.
975
+
"findingCount": "A String", # Output only. The number of findings associated with this alert.
976
+
"findings": [ # Output only. Findings that are covered by this alert.
977
+
"A String",
978
+
],
979
+
"name": "A String", # Identifier. Server generated name for the alert. format is projects/{project}/alerts/{alert}
980
+
"priorityAnalysis": { # Structured priority analysis for a threat. # Output only. High-Precision Priority Analysis for the alert.
981
+
"confidence": "A String", # The level of confidence in the given verdict.
982
+
"priorityLevel": "A String", # The level of Priority.
983
+
"reasoning": "A String", # Human-readable explanation from the model, detailing why a particular result is considered to have a certain priority.
984
+
},
985
+
"relevanceAnalysis": { # Structured relevance analysis for a threat. # Output only. High-Precision Relevance Analysis verdict for the alert.
986
+
"confidence": "A String", # The level of confidence in the given verdict.
987
+
"evidence": { # Details the evidence used to determine the relevance verdict. # Evidence supporting the verdict, including matched and unmatched items.
988
+
"commonThemes": [ # A list of semantic themes or concepts found to be common, related, or aligned between the sources, supporting the verdict.
989
+
"A String",
990
+
],
991
+
"distinctThemes": [ # A list of semantic themes or descriptions unique to one source or semantically distant.
992
+
"A String",
993
+
],
994
+
},
995
+
"reasoning": "A String", # Human-readable explanation from the matcher, detailing why a particular result is considered relevant or not relevant.
996
+
"relevanceLevel": "A String", # The level of relevance.
997
+
"relevant": True or False, # Indicates whether the threat is considered relevant.
998
+
},
999
+
"severityAnalysis": { # Structured severity analysis for a threat. # Output only. High-Precision Severity Analysis for the alert.
1000
+
"confidence": "A String", # The level of confidence in the given verdict.
1001
+
"reasoning": "A String", # Human-readable explanation from the model, detailing why a particular result is considered to have a certain severity.
1002
+
"severityLevel": "A String", # The level of severity.
1003
+
},
1004
+
"state": "A String", # Output only. State of the alert.
0 commit comments