Response Fields
Field Name | Type | Description |
---|
error | string
| The error message if the command execution failed. |
returnData | string
| The return data from the API request. |
contextData | array<JSON Object>
| The context data from the API request. |
Sample Data
JSON
{
"error": "",
"returnData": "Successful",
"contextData": [
{
"FirstSeen": "02/18/2020 06:45 PM UTC",
"LastSeen": "01/07/2022 08:40 PM UTC",
"Id": 386425,
"AFTypeName": "Internal Endpoint",
"AFName": "D3CYBER-DC",
"imgURL": "/images/cyber/New_Internal_Endpoint_50px.png",
"techId": "d89a8e79-275a-e911-80ce-64006a25830f",
"techName": "Data from Removable Media",
"techNum": 7,
"techniqueString": "Data from Removable Media, Drive-by Compromise, Gather Victim Host Information, Gather Victim Host Information: Firmware, Man-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay, Timestomp, User Execution",
"tacticName": "Collection",
"tacticNum": 5,
"tacticString": "Collection, Defense Evasion, Execution, Initial Access, Reconnaissance",
"riskLevel": "N/A",
"allowDownload": false,
"allowDelete": true
},
{
"Related Events": [
60088,
60087
],
"Related Incidents": [
"20220114-11",
"20210422-30",
"20210417-27",
"20200930-36",
"20200925-35",
"20200925-34",
"20200911-6",
"20200911-5",
"20200911-4"
]
}
]
}