Cortex.Api.Quarantine

Quarantine status lookup for files on Cortex-managed endpoints.

{ endpointId : String

, filePath : String

, fileHash : String

}

One file to look up, identified by the endpoint it lives on, its path, and its SHA-256 hash.

The OpenAPI spec swaps the file_path and file_hash field descriptions, but the wire format and example payload confirm filePath is the on-disk path and fileHash is the SHA-256.

type alias FileStatus =

{ endpointId : Maybe String

, filePath : Maybe String

, fileHash : Maybe String

, status : Maybe Bool

}

Quarantine status of a single file, returned by getStatus.

status is Just True when the file is quarantined on the endpoint, Just False when it is not. All fields are wrapped in Maybe because the API schema does not mark them required.

getStatus : List FileQuery -> Request (List FileStatus)

POST /public_api/v1/quarantine/status

Look up the quarantine status of one or more files. The API rejects an empty list with HTTP 500, so callers should pass at least one FileQuery.

vanhecke/celmex/3.0.0

Cortex.Api.Quarantine

Modules