vanhecke/celmex/2.0.0

NOTE: the latest version is 3.0.0

Unavailable. Nobody can download this version any more, with elm or with the Lamdera compiler: github.com/vanhecke/celmex is gone (deleted or private); Software Heritage not asked yet (this run's --swh-calls were used up); no fork with the same repo name found; no cached copy. Use another version.

Details

Cortex.Api.Indicators

Cortex threat intelligence indicators (IOCs).

type alias SearchArgs =
{ filters : List Filter
, sort : Maybe Sort
, range : Maybe Range
, timeframe : Maybe Timeframe
, extra : List ( String, Value )
}

Arguments to get. All fields are optional; pass defaultSearchArgs for an unfiltered request. extra is merged last into request_data and overrides any SDK-generated key on collision — e.g. the indicator endpoint's extended_view flag is reachable through it.

defaultSearchArgs : SearchArgs

A SearchArgs with no filters, sort, pagination, or timeframe.

type alias Indicator =
{ ruleId : Maybe Int
, indicator : Maybe String
, type_ : Maybe String
, severity : Maybe String
, expirationDate : Maybe Int
, defaultExpirationEnabled : Maybe Bool
, comment : Maybe String
, reputation : Value
, reliability : Value
}

A single threat-intelligence indicator (hash, domain, URL, IP, etc.). The reputation and reliability fields carry per-source sub-objects whose shape varies, so they are kept as raw JSON.

type alias IndicatorsResponse =
{ objectsCount : Maybe Int
, objects : List Indicator
, objectsType : Maybe String
}

Envelope returned by get. Not wrapped in the standard reply.

get : SearchArgs -> Request IndicatorsResponse

POST /public_api/v1/indicators/get

Response is top-level {objects_count, objects, objects_type} — NOT wrapped in the usual reply envelope.