import * as S from "@distilled.cloud/core/schema"; import * as API from "@distilled.cloud/core/api"; import { type CloudflareOpError, type CloudflareOpContext } from "../protocol.ts"; import { ResultInfo } from "../pagination.ts"; export type { CloudflareOpError, CloudflareOpContext }; declare const ScanConfigNotFound_base: S.Class, import("effect/Cause").YieldableError>; export declare class ScanConfigNotFound extends /*@__PURE__*/ ScanConfigNotFound_base { } export type ThreatEventsBulkCreateRequestDataItemRawDataMap = { [key: string]: unknown | undefined; }; export declare const ThreatEventsBulkCreateRequestDataItemRawDataMap: S.Schema; export interface ThreatEventsBulkCreateRequestDataItemRaw { data: ThreatEventsBulkCreateRequestDataItemRawDataMap; source?: string; tlp?: string; } export declare const ThreatEventsBulkCreateRequestDataItemRaw: S.Schema; export interface ThreatEventsBulkCreateRequestDataItemIndicatorsItem { /** The type of indicator (e.g., DOMAIN, IP, JA3, HASH) */ indicatorType: string; /** The indicator value (e.g., domain name, IP address, hash) */ value: string; } export declare const ThreatEventsBulkCreateRequestDataItemIndicatorsItem: S.Schema; export type ThreatEventsBulkCreateRequestDataItemIndicatorsList = Array; export declare const ThreatEventsBulkCreateRequestDataItemIndicatorsList: S.Schema; export type ThreatEventsBulkCreateRequestDataItemTagsList = Array; export declare const ThreatEventsBulkCreateRequestDataItemTagsList: S.Schema; export interface ThreatEventsBulkCreateRequestDataItem { category: string; date: string; event: string; raw: ThreatEventsBulkCreateRequestDataItemRaw; tlp: string; accountId?: number; attacker?: string; attackerCountry?: string; datasetId?: string; indicator?: string; /** Array of indicators for this event. Supports multiple indicators per event for complex scenarios. */ indicators?: ThreatEventsBulkCreateRequestDataItemIndicatorsList; indicatorType?: string; insight?: string; tags?: ThreatEventsBulkCreateRequestDataItemTagsList; targetCountry?: string; targetIndustry?: string; } export declare const ThreatEventsBulkCreateRequestDataItem: S.Schema; export type ThreatEventsBulkCreateRequestDataList = Array; export declare const ThreatEventsBulkCreateRequestDataList: S.Schema; export interface BulkCreateThreatEventsRequest { /** Account ID. */ accountId: string; data: ThreatEventsBulkCreateRequestDataList; datasetId: string; /** When true, response includes array of created event UUIDs and shard IDs. Useful for tracking which events were created and where. */ includeCreatedEvents?: boolean; } export declare const BulkCreateThreatEventsRequest: S.Schema; export interface ThreatEventsBulkCreateResponseCreatedEventsItem { /** Original index in the input data array */ eventIndex: number; /** Dataset ID of the shard where the event was created */ shardId: string; /** UUID of the created event */ uuid: string; } export declare const ThreatEventsBulkCreateResponseCreatedEventsItem: S.Schema; export type ThreatEventsBulkCreateResponseCreatedEventsList = Array; export declare const ThreatEventsBulkCreateResponseCreatedEventsList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface BulkCreateThreatEventsResponse { /** Number of events created */ createdEventsCount: number; /** Number of new tags created in SoT */ createdTagsCount: number; /** Number of errors encountered */ errorCount: number; /** Number of indicators queued for async processing */ queuedIndicatorsCount: number; /** Correlation ID for async indicator processing */ createBulkEventsRequestId?: string | null; /** Array of created events with UUIDs and shard locations. Only present when includeCreatedEvents=true */ createdEvents?: ThreatEventsBulkCreateResponseCreatedEventsList | null; } export declare const BulkCreateThreatEventsResponse: S.Schema; export interface CreateBinaryStorageRequest { /** Account ID. */ accountId: string; } export declare const CreateBinaryStorageRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface CreateBinaryStorageResponse { contentType: string; md5: string; sha1: string; sha256: string; } export declare const CreateBinaryStorageResponse: S.Schema; export type RequestsCreateRequestTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsCreateRequestTlp: any; export interface CreateRequestRequest { /** Identifier. */ accountId: string; /** Request content. */ content?: string; /** Priority for analyzing the request. */ priority?: string; /** Requested information from request. */ requestType?: string; /** Brief description of the request. */ summary?: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp?: RequestsCreateRequestTlp | (string & {}); } export declare const CreateRequestRequest: S.Schema; export type RequestsCreateResponseTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsCreateResponseTlp: any; export type RequestsCreateResponseStatus = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsCreateResponseStatus: any; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateRequestResponse { /** UUID. */ id: string; /** Request content. */ content: string; created: string; priority: string; /** Requested information from request. */ request: string; /** Brief description of the request. */ summary: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsCreateResponseTlp; updated: string; completed?: string | null; /** Tokens for the request messages. */ messageTokens?: number | null; /** Readable Request ID. */ readableId?: string | null; /** Request Status. */ status?: RequestsCreateResponseStatus | null; /** Tokens for the request. */ tokens?: number | null; } export declare const CreateRequestResponse: S.Schema; export interface CreateRequestAssetRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; /** Page number of results. */ page: number; /** Number of results per page. */ perPage: number; } export declare const CreateRequestAssetRequest: S.Schema; export interface RequestsAssetsCreateResultItem { /** Asset ID. */ id: number; /** Asset name. */ name: string; /** Defines the asset creation time. */ created?: string | null; /** Asset description. */ description?: string | null; /** Asset file type. */ fileType?: string | null; } export declare const RequestsAssetsCreateResultItem: S.Schema; export type RequestsAssetsCreateResultList = Array; export declare const RequestsAssetsCreateResultList: S.Schema; export interface CreateRequestAssetResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: RequestsAssetsCreateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export declare const CreateRequestAssetResponse: S.Schema; export interface CreateRequestMessageRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; /** Content of message. */ content?: string; } export declare const CreateRequestMessageRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateRequestMessageResponse { /** Message ID. */ id: number; /** Author of message. */ author: string; /** Content of message. */ content: string; /** Whether the message is a follow-on request. */ isFollowOnRequest: boolean; /** Defines the message last updated time. */ updated: string; /** Defines the message creation time. */ created?: string | null; } export declare const CreateRequestMessageResponse: S.Schema; export type RequestsPriorityCreateRequestLabelsList = Array; export declare const RequestsPriorityCreateRequestLabelsList: S.Schema; export type RequestsPriorityCreateRequestTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsPriorityCreateRequestTlp: any; export interface CreateRequestPriorityRequest { /** Identifier. */ accountId: string; /** List of labels. */ labels: RequestsPriorityCreateRequestLabelsList; /** Priority. */ priority: number; /** Requirement. */ requirement: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsPriorityCreateRequestTlp | (string & {}); } export declare const CreateRequestPriorityRequest: S.Schema; export type RequestsPriorityCreateResponseLabelsList = Array; export declare const RequestsPriorityCreateResponseLabelsList: S.Schema; export type RequestsPriorityCreateResponseTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsPriorityCreateResponseTlp: any; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateRequestPriorityResponse { /** UUID. */ id: string; /** Priority creation time. */ created: string; /** List of labels. */ labels: RequestsPriorityCreateResponseLabelsList; /** Priority. */ priority: number; /** Requirement. */ requirement: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsPriorityCreateResponseTlp; /** Priority last updated time. */ updated: string; } export declare const CreateRequestPriorityResponse: S.Schema; export type ScansConfigCreateRequestIpsList = Array; export declare const ScansConfigCreateRequestIpsList: S.Schema; export type ScansConfigCreateRequestPortsList = Array; export declare const ScansConfigCreateRequestPortsList: S.Schema; export interface CreateScanConfigRequest { /** Defines the Account ID. */ accountId: string; /** Defines a list of IP addresses or CIDR blocks to scan. The maximum number of total IP addresses allowed is 5000. */ ips: ScansConfigCreateRequestIpsList; /** Defines the number of days between each scan (0 = One-off scan). */ frequency?: number; /** Defines a list of ports to scan. Valid values are:"default", "all", or a comma-separated list of ports or range of ports (e.g. ["1-80", "443"]). "default" scans the 100 most commonly open ports. */ ports?: ScansConfigCreateRequestPortsList; } export declare const CreateScanConfigRequest: S.Schema; export type ScansConfigCreateResponseIpsList = Array; export declare const ScansConfigCreateResponseIpsList: S.Schema; export type ScansConfigCreateResponsePortsList = Array; export declare const ScansConfigCreateResponsePortsList: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateScanConfigResponse { /** Defines the Config ID. */ id: string; accountId: string; /** Defines the number of days between each scan (0 = One-off scan). */ frequency: number; /** Defines a list of IP addresses or CIDR blocks to scan. The maximum number of total IP addresses allowed is 5000. */ ips: ScansConfigCreateResponseIpsList; /** Defines a list of ports to scan. Valid values are:"default", "all", or a comma-separated list of ports or range of ports (e.g. ["1-80", "443"]). "default" scans the 100 most commonly open ports. */ ports: ScansConfigCreateResponsePortsList; } export declare const CreateScanConfigResponse: S.Schema; export type ThreatEventsCreateRequestRawDataMap = { [key: string]: unknown | undefined; }; export declare const ThreatEventsCreateRequestRawDataMap: S.Schema; export interface ThreatEventsCreateRequestRaw { data: ThreatEventsCreateRequestRawDataMap; source?: string; tlp?: string; } export declare const ThreatEventsCreateRequestRaw: S.Schema; export type ThreatEventsCreateRequestIndicatorsItem = ThreatEventsBulkCreateRequestDataItemIndicatorsItem; export declare const ThreatEventsCreateRequestIndicatorsItem: S.Schema; export type ThreatEventsCreateRequestIndicatorsList = Array; export declare const ThreatEventsCreateRequestIndicatorsList: S.Schema; export type ThreatEventsCreateRequestTagsList = Array; export declare const ThreatEventsCreateRequestTagsList: S.Schema; export interface CreateThreatEventRequest { /** Account ID. */ accountId: string; category: string; date: string; event: string; raw: ThreatEventsCreateRequestRaw; tlp: string; attacker?: string; attackerCountry?: string; datasetId?: string; indicator?: string; /** Array of indicators for this event. Supports multiple indicators per event for complex scenarios. */ indicators?: ThreatEventsCreateRequestIndicatorsList; indicatorType?: string; insight?: string; tags?: ThreatEventsCreateRequestTagsList; targetCountry?: string; targetIndustry?: string; } export declare const CreateThreatEventRequest: S.Schema; export type ThreatEventsCreateResponseMitreAttackList = Array; export declare const ThreatEventsCreateResponseMitreAttackList: S.Schema; export type ThreatEventsCreateResponseMitreCapecList = Array; export declare const ThreatEventsCreateResponseMitreCapecList: S.Schema; export type ThreatEventsCreateResponseReferencedList = Array; export declare const ThreatEventsCreateResponseReferencedList: S.Schema; export type ThreatEventsCreateResponseReferencedIdsList = Array; export declare const ThreatEventsCreateResponseReferencedIdsList: S.Schema; export type ThreatEventsCreateResponseReferencesList = Array; export declare const ThreatEventsCreateResponseReferencesList: S.Schema; export type ThreatEventsCreateResponseReferencesIdsList = Array; export declare const ThreatEventsCreateResponseReferencesIdsList: S.Schema; export type ThreatEventsCreateResponseTagsList = Array; export declare const ThreatEventsCreateResponseTagsList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface CreateThreatEventResponse { attacker: string; attackerCountry: string; attackerCountryAlpha3: string; category: string; datasetId: string; date: string; event: string; hasChildren: boolean; indicator: string; indicatorType: string; indicatorTypeId: number; killChain: number; mitreAttack: ThreatEventsCreateResponseMitreAttackList; mitreCapec: ThreatEventsCreateResponseMitreCapecList; numReferenced: number; numReferences: number; rawId: string; referenced: ThreatEventsCreateResponseReferencedList; referencedIds: ThreatEventsCreateResponseReferencedIdsList; references: ThreatEventsCreateResponseReferencesList; referencesIds: ThreatEventsCreateResponseReferencesIdsList; tags: ThreatEventsCreateResponseTagsList; targetCountry: string; targetCountryAlpha3: string; targetIndustry: string; tlp: string; uuid: string; insight?: string | null; releasabilityId?: string | null; } export declare const CreateThreatEventResponse: S.Schema; export type ThreatEventsCategoriesCreateRequestMitreAttackList = Array; export declare const ThreatEventsCategoriesCreateRequestMitreAttackList: S.Schema; export type ThreatEventsCategoriesCreateRequestMitreCapecList = Array; export declare const ThreatEventsCategoriesCreateRequestMitreCapecList: S.Schema; export interface CreateThreatEventCategoryRequest { /** Account ID. */ accountId: string; killChain: number; name: string; mitreAttack?: ThreatEventsCategoriesCreateRequestMitreAttackList; mitreCapec?: ThreatEventsCategoriesCreateRequestMitreCapecList; shortname?: string; } export declare const CreateThreatEventCategoryRequest: S.Schema; export type ThreatEventsCategoriesCreateResponseMitreAttackList = Array; export declare const ThreatEventsCategoriesCreateResponseMitreAttackList: S.Schema; export type ThreatEventsCategoriesCreateResponseMitreCapecList = Array; export declare const ThreatEventsCategoriesCreateResponseMitreCapecList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface CreateThreatEventCategoryResponse { killChain: number; name: string; uuid: string; mitreAttack?: ThreatEventsCategoriesCreateResponseMitreAttackList | null; mitreCapec?: ThreatEventsCategoriesCreateResponseMitreCapecList | null; shortname?: string | null; } export declare const CreateThreatEventCategoryResponse: S.Schema; export interface CreateThreatEventDatasetRequest { /** Account ID. */ accountId: string; /** If true, then anyone can search the dataset. If false, then its limited to the account. */ isPublic: boolean; /** Used to describe the dataset within the account context. */ name: string; } export declare const CreateThreatEventDatasetRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface CreateThreatEventDatasetResponse { isPublic: boolean; name: string; uuid: string; deletedAt?: string | null; } export declare const CreateThreatEventDatasetResponse: S.Schema; export type ThreatEventsEventTagsCreateRequestTagsList = Array; export declare const ThreatEventsEventTagsCreateRequestTagsList: S.Schema; export interface CreateThreatEventEventTagRequest { /** Account ID. */ accountId: string; /** Event UUID. */ eventId: string; tags: ThreatEventsEventTagsCreateRequestTagsList; } export declare const CreateThreatEventEventTagRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateThreatEventEventTagResponse { success: boolean; } export declare const CreateThreatEventEventTagResponse: S.Schema; export type ThreatEventsTagsCreateRequestAliasesItemTlp = "red" | "amber" | "green" | "white"; export declare const ThreatEventsTagsCreateRequestAliasesItemTlp: any; export interface ThreatEventsTagsCreateRequestAliasesItem { value: string; confidence?: number; tlp?: ThreatEventsTagsCreateRequestAliasesItemTlp | (string & {}); } export declare const ThreatEventsTagsCreateRequestAliasesItem: S.Schema; export type ThreatEventsTagsCreateRequestAliasesList = Array; export declare const ThreatEventsTagsCreateRequestAliasesList: S.Schema; export type ThreatEventsTagsCreateRequestAliasGroupNamesList = Array; export declare const ThreatEventsTagsCreateRequestAliasGroupNamesList: S.Schema; export type ThreatEventsTagsCreateRequestAliasGroupNamesInternalList = Array; export declare const ThreatEventsTagsCreateRequestAliasGroupNamesInternalList: S.Schema; export type ThreatEventsTagsCreateRequestExternalReferenceLinksList = Array; export declare const ThreatEventsTagsCreateRequestExternalReferenceLinksList: S.Schema; export interface ThreatEventsTagsCreateRequestExternalReferencesItem { url: string; description?: string; } export declare const ThreatEventsTagsCreateRequestExternalReferencesItem: S.Schema; export type ThreatEventsTagsCreateRequestExternalReferencesList = Array; export declare const ThreatEventsTagsCreateRequestExternalReferencesList: S.Schema; export type ThreatEventsTagsCreateRequestInternalAliasesItemTlp = "red" | "amber" | "green" | "white"; export declare const ThreatEventsTagsCreateRequestInternalAliasesItemTlp: any; export interface ThreatEventsTagsCreateRequestInternalAliasesItem { value: string; confidence?: number; tlp?: ThreatEventsTagsCreateRequestInternalAliasesItemTlp | (string & {}); } export declare const ThreatEventsTagsCreateRequestInternalAliasesItem: S.Schema; export type ThreatEventsTagsCreateRequestInternalAliasesList = Array; export declare const ThreatEventsTagsCreateRequestInternalAliasesList: S.Schema; export type ThreatEventsTagsCreateRequestOriginCountryTlp = "red" | "amber" | "green" | "white"; export declare const ThreatEventsTagsCreateRequestOriginCountryTlp: any; export interface CreateThreatEventTagRequest { /** Account ID. */ accountId: string; value: string; activeDuration?: string; /** Actor variety. Allowed values: Activist, Competitor, Customer, Crime Syndicate, Former Employee, Nation State, Organized Crime, Nation State Affiliated, Terrorist, Unaffiliated. */ actorCategory?: string; /** Confidence (1-10) in the actor variety (actorCategory). CFONE-only: stripped from responses to non-CFONE accounts. */ actorCategoryConfidence?: number; /** Structured aliases ({ value, confidence 1-10, tlp }). CFONE-only: stripped from responses to non-CFONE accounts. */ aliases?: ThreatEventsTagsCreateRequestAliasesList; aliasGroupNames?: ThreatEventsTagsCreateRequestAliasGroupNamesList; aliasGroupNamesInternal?: ThreatEventsTagsCreateRequestAliasGroupNamesInternalList; analyticPriority?: number; attributionConfidence?: string; attributionConfidenceScore?: number; attributionOrganization?: string; categoryUuid?: string; /** Date the actor was discovered (ISO YYYY-MM-DD). */ dateOfDiscovery?: string; externalReferenceLinks?: ThreatEventsTagsCreateRequestExternalReferenceLinksList; /** Structured external references ({ url, description }). Public: returned to all accounts. */ externalReferences?: ThreatEventsTagsCreateRequestExternalReferencesList; /** Internal structured aliases ({ value, confidence 1-10, tlp }). CFONE-only: never returned to non-CFONE accounts. */ internalAliases?: ThreatEventsTagsCreateRequestInternalAliasesList; internalDescription?: string; /** Actor motive. Allowed values: Convenience, Fear, Fun, Financial, Grudge, Ideology, Espionage. */ motive?: string; /** Confidence (1-10) in the actor motive. CFONE-only: stripped from responses to non-CFONE accounts. */ motiveConfidence?: number; opsecLevel?: string; /** Confidence (1-10) in the origin-country attribution. CFONE-only: stripped from responses to non-CFONE accounts. */ originCountryConfidence?: number; originCountryISO?: string; /** TLP marking for the origin-country attribution. CFONE-only: stripped from responses to non-CFONE accounts. */ originCountryTlp?: ThreatEventsTagsCreateRequestOriginCountryTlp | (string & {}); priority?: number; sophisticationLevel?: string; } export declare const CreateThreatEventTagRequest: S.Schema; export type ThreatEventsTagsCreateResponseAliasesItemTlp = "red" | "amber" | "green" | "white"; export declare const ThreatEventsTagsCreateResponseAliasesItemTlp: any; export interface ThreatEventsTagsCreateResponseAliasesItem { value: string; confidence?: number | null; tlp?: ThreatEventsTagsCreateResponseAliasesItemTlp | null; } export declare const ThreatEventsTagsCreateResponseAliasesItem: S.Schema; export type ThreatEventsTagsCreateResponseAliasesList = Array; export declare const ThreatEventsTagsCreateResponseAliasesList: S.Schema; export type ThreatEventsTagsCreateResponseAliasGroupNamesList = Array; export declare const ThreatEventsTagsCreateResponseAliasGroupNamesList: S.Schema; export type ThreatEventsTagsCreateResponseAliasGroupNamesInternalList = Array; export declare const ThreatEventsTagsCreateResponseAliasGroupNamesInternalList: S.Schema; export type ThreatEventsTagsCreateResponseExternalReferenceLinksList = Array; export declare const ThreatEventsTagsCreateResponseExternalReferenceLinksList: S.Schema; export interface ThreatEventsTagsCreateResponseExternalReferencesItem { url: string; description?: string | null; } export declare const ThreatEventsTagsCreateResponseExternalReferencesItem: S.Schema; export type ThreatEventsTagsCreateResponseExternalReferencesList = Array; export declare const ThreatEventsTagsCreateResponseExternalReferencesList: S.Schema; export type ThreatEventsTagsCreateResponseInternalAliasesItemTlp = "red" | "amber" | "green" | "white"; export declare const ThreatEventsTagsCreateResponseInternalAliasesItemTlp: any; export interface ThreatEventsTagsCreateResponseInternalAliasesItem { value: string; confidence?: number | null; tlp?: ThreatEventsTagsCreateResponseInternalAliasesItemTlp | null; } export declare const ThreatEventsTagsCreateResponseInternalAliasesItem: S.Schema; export type ThreatEventsTagsCreateResponseInternalAliasesList = Array; export declare const ThreatEventsTagsCreateResponseInternalAliasesList: S.Schema; export type ThreatEventsTagsCreateResponseOriginCountryTlp = "red" | "amber" | "green" | "white"; export declare const ThreatEventsTagsCreateResponseOriginCountryTlp: any; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface CreateThreatEventTagResponse { uuid: string; value: string; activeDuration?: string | null; actorCategory?: string | null; /** Confidence (1-10) in the actor variety (actorCategory). CFONE-only: stripped from responses to non-CFONE accounts. */ actorCategoryConfidence?: number | null; /** Structured aliases ({ value, confidence 1-10, tlp }). CFONE-only: stripped from responses to non-CFONE accounts. */ aliases?: ThreatEventsTagsCreateResponseAliasesList | null; aliasGroupNames?: ThreatEventsTagsCreateResponseAliasGroupNamesList | null; aliasGroupNamesInternal?: ThreatEventsTagsCreateResponseAliasGroupNamesInternalList | null; analyticPriority?: number | null; attributionConfidence?: string | null; attributionConfidenceScore?: number | null; attributionOrganization?: string | null; categoryName?: string | null; categoryUuid?: string | null; dateOfDiscovery?: string | null; externalReferenceLinks?: ThreatEventsTagsCreateResponseExternalReferenceLinksList | null; /** Structured external references ({ url, description }). Public: returned to all accounts. */ externalReferences?: ThreatEventsTagsCreateResponseExternalReferencesList | null; /** Internal structured aliases ({ value, confidence 1-10, tlp }). CFONE-only: never returned to non-CFONE accounts. */ internalAliases?: ThreatEventsTagsCreateResponseInternalAliasesList | null; internalDescription?: string | null; motive?: string | null; /** Confidence (1-10) in the actor motive. CFONE-only: stripped from responses to non-CFONE accounts. */ motiveConfidence?: number | null; opsecLevel?: string | null; /** Confidence (1-10) in the origin-country attribution. CFONE-only: stripped from responses to non-CFONE accounts. */ originCountryConfidence?: number | null; originCountryISO?: string | null; originCountryISOAlpha3?: string | null; /** TLP marking for the origin-country attribution. CFONE-only: stripped from responses to non-CFONE accounts. */ originCountryTlp?: ThreatEventsTagsCreateResponseOriginCountryTlp | null; priority?: number | null; sophisticationLevel?: string | null; } export declare const CreateThreatEventTagResponse: S.Schema; export interface DeleteRequestAssetRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; /** UUID. */ assetId: string; } export declare const DeleteRequestAssetRequest: S.Schema; export interface DeleteRequestAssetResponse { } export declare const DeleteRequestAssetResponse: S.Schema; export interface DeleteRequestMessageRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; messageId: number; } export declare const DeleteRequestMessageRequest: S.Schema; export interface DeleteRequestMessageResponse { } export declare const DeleteRequestMessageResponse: S.Schema; export interface DeleteRequestPriorityRequest { /** Identifier. */ accountId: string; /** UUID. */ priorityId: string; } export declare const DeleteRequestPriorityRequest: S.Schema; export interface DeleteRequestPriorityResponse { } export declare const DeleteRequestPriorityResponse: S.Schema; export interface DeleteScanConfigRequest { /** Defines the Account ID. */ accountId: string; /** Defines the Config ID. */ configId: string; } export declare const DeleteScanConfigRequest: S.Schema; export type DeleteScanConfigResponse = unknown; export declare const DeleteScanConfigResponse: S.Schema; export interface DeleteThreatEventCategoryRequest { /** Account ID. */ accountId: string; /** Category UUID. */ categoryId: string; } export declare const DeleteThreatEventCategoryRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface DeleteThreatEventCategoryResponse { uuid: string; } export declare const DeleteThreatEventCategoryResponse: S.Schema; export interface DeleteThreatEventEventTagRequest { /** Account ID. */ accountId: string; /** Event UUID. */ eventId: string; } export declare const DeleteThreatEventEventTagRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteThreatEventEventTagResponse { success: boolean; } export declare const DeleteThreatEventEventTagResponse: S.Schema; export interface DeleteThreatEventRelateRequest { /** Account ID. */ accountId: string; /** Event UUID. */ eventId: string; } export declare const DeleteThreatEventRelateRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteThreatEventRelateResponse { success: boolean; } export declare const DeleteThreatEventRelateResponse: S.Schema; export interface GetBinaryStorageRequest { /** Account ID. */ accountId: string; /** hash of the binary */ hash: string; } export declare const GetBinaryStorageRequest: S.Schema; export interface GetBinaryStorageResponse { } export declare const GetBinaryStorageResponse: S.Schema; export interface GetRequestRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; } export declare const GetRequestRequest: S.Schema; export type RequestsGetResponseTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsGetResponseTlp: any; export type RequestsGetResponseStatus = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsGetResponseStatus: any; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetRequestResponse { /** UUID. */ id: string; /** Request content. */ content: string; created: string; priority: string; /** Requested information from request. */ request: string; /** Brief description of the request. */ summary: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsGetResponseTlp; updated: string; completed?: string | null; /** Tokens for the request messages. */ messageTokens?: number | null; /** Readable Request ID. */ readableId?: string | null; /** Request Status. */ status?: RequestsGetResponseStatus | null; /** Tokens for the request. */ tokens?: number | null; } export declare const GetRequestResponse: S.Schema; export type RequestsMessageGetRequestSortOrder = "asc" | "desc"; export declare const RequestsMessageGetRequestSortOrder: any; export interface GetRequestMessageRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; /** Page number of results. */ page: number; /** Number of results per page. */ perPage: number; /** Retrieve mes ges created after this time. */ after?: string; /** Retrieve messages created before this time. */ before?: string; /** Field to sort results by. */ sortBy?: string; /** Sort order (asc or desc). */ sortOrder?: RequestsMessageGetRequestSortOrder | (string & {}); } export declare const GetRequestMessageRequest: S.Schema; export interface RequestsMessageGetResultItem { /** Message ID. */ id: number; /** Author of message. */ author: string; /** Content of message. */ content: string; /** Whether the message is a follow-on request. */ isFollowOnRequest: boolean; /** Defines the message last updated time. */ updated: string; /** Defines the message creation time. */ created?: string | null; } export declare const RequestsMessageGetResultItem: S.Schema; export type RequestsMessageGetResultList = Array; export declare const RequestsMessageGetResultList: S.Schema; export interface GetRequestMessageResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: RequestsMessageGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export declare const GetRequestMessageResponse: S.Schema; export interface GetRequestPriorityRequest { /** Identifier. */ accountId: string; /** UUID. */ priorityId: string; } export declare const GetRequestPriorityRequest: S.Schema; export type RequestsPriorityGetResponseTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsPriorityGetResponseTlp: any; export type RequestsPriorityGetResponseStatus = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsPriorityGetResponseStatus: any; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetRequestPriorityResponse { /** UUID. */ id: string; /** Request content. */ content: string; created: string; priority: string; /** Requested information from request. */ request: string; /** Brief description of the request. */ summary: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsPriorityGetResponseTlp; updated: string; completed?: string | null; /** Tokens for the request messages. */ messageTokens?: number | null; /** Readable Request ID. */ readableId?: string | null; /** Request Status. */ status?: RequestsPriorityGetResponseStatus | null; /** Tokens for the request. */ tokens?: number | null; } export declare const GetRequestPriorityResponse: S.Schema; export interface GetScanResultRequest { /** Defines the Account ID. */ accountId: string; /** Defines the Config ID. */ configId: string; } export declare const GetScanResultRequest: S.Schema; export interface ScansResultsGetResponse1111Item { number?: number | null; proto?: string | null; status?: string | null; } export declare const ScansResultsGetResponse1111Item: S.Schema; export type ScansResultsGetResponse1111List = Array; export declare const ScansResultsGetResponse1111List: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetScanResultResponse { "1_1_1_1": ScansResultsGetResponse1111List; } export declare const GetScanResultResponse: S.Schema; export interface GetThreatEventRequest { /** Account ID. */ accountId: string; /** Event UUID. */ eventId: string; } export declare const GetThreatEventRequest: S.Schema; export type ThreatEventsGetResponseMitreAttackList = Array; export declare const ThreatEventsGetResponseMitreAttackList: S.Schema; export type ThreatEventsGetResponseMitreCapecList = Array; export declare const ThreatEventsGetResponseMitreCapecList: S.Schema; export type ThreatEventsGetResponseReferencedList = Array; export declare const ThreatEventsGetResponseReferencedList: S.Schema; export type ThreatEventsGetResponseReferencedIdsList = Array; export declare const ThreatEventsGetResponseReferencedIdsList: S.Schema; export type ThreatEventsGetResponseReferencesList = Array; export declare const ThreatEventsGetResponseReferencesList: S.Schema; export type ThreatEventsGetResponseReferencesIdsList = Array; export declare const ThreatEventsGetResponseReferencesIdsList: S.Schema; export type ThreatEventsGetResponseTagsList = Array; export declare const ThreatEventsGetResponseTagsList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetThreatEventResponse { attacker: string; attackerCountry: string; attackerCountryAlpha3: string; category: string; datasetId: string; date: string; event: string; hasChildren: boolean; indicator: string; indicatorType: string; indicatorTypeId: number; killChain: number; mitreAttack: ThreatEventsGetResponseMitreAttackList; mitreCapec: ThreatEventsGetResponseMitreCapecList; numReferenced: number; numReferences: number; rawId: string; referenced: ThreatEventsGetResponseReferencedList; referencedIds: ThreatEventsGetResponseReferencedIdsList; references: ThreatEventsGetResponseReferencesList; referencesIds: ThreatEventsGetResponseReferencesIdsList; tags: ThreatEventsGetResponseTagsList; targetCountry: string; targetCountryAlpha3: string; targetIndustry: string; tlp: string; uuid: string; insight?: string | null; releasabilityId?: string | null; } export declare const GetThreatEventResponse: S.Schema; export interface GetThreatEventCategoryRequest { /** Account ID. */ accountId: string; /** Category UUID. */ categoryId: string; } export declare const GetThreatEventCategoryRequest: S.Schema; export type ThreatEventsCategoriesGetResponseMitreAttackList = Array; export declare const ThreatEventsCategoriesGetResponseMitreAttackList: S.Schema; export type ThreatEventsCategoriesGetResponseMitreCapecList = Array; export declare const ThreatEventsCategoriesGetResponseMitreCapecList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetThreatEventCategoryResponse { killChain: number; name: string; uuid: string; mitreAttack?: ThreatEventsCategoriesGetResponseMitreAttackList | null; mitreCapec?: ThreatEventsCategoriesGetResponseMitreCapecList | null; shortname?: string | null; } export declare const GetThreatEventCategoryResponse: S.Schema; export interface GetThreatEventDatasetRequest { /** Account ID. */ accountId: string; /** Dataset ID. */ datasetId: string; } export declare const GetThreatEventDatasetRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetThreatEventDatasetResponse { isPublic: boolean; name: string; uuid: string; deletedAt?: string | null; } export declare const GetThreatEventDatasetResponse: S.Schema; export interface GetThreatEventRawRequest { /** Account ID. */ accountId: string; /** Event UUID. */ eventId: string; /** Raw Event UUID. */ rawId: string; } export declare const GetThreatEventRawRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetThreatEventRawResponse { id: string; accountId: number; created: string; data: unknown; source: string; tlp: string; } export declare const GetThreatEventRawResponse: S.Schema; export interface ListScanConfigsRequest { /** Defines the Account ID. */ accountId: string; } export declare const ListScanConfigsRequest: S.Schema; export type ScansConfigListResultItemIpsList = Array; export declare const ScansConfigListResultItemIpsList: S.Schema; export type ScansConfigListResultItemPortsList = Array; export declare const ScansConfigListResultItemPortsList: S.Schema; export interface ScansConfigListResultItem { /** Defines the Config ID. */ id: string; accountId: string; /** Defines the number of days between each scan (0 = One-off scan). */ frequency: number; /** Defines a list of IP addresses or CIDR blocks to scan. The maximum number of total IP addresses allowed is 5000. */ ips: ScansConfigListResultItemIpsList; /** Defines a list of ports to scan. Valid values are:"default", "all", or a comma-separated list of ports or range of ports (e.g. ["1-80", "443"]). "default" scans the 100 most commonly open ports. */ ports: ScansConfigListResultItemPortsList; } export declare const ScansConfigListResultItem: S.Schema; export type ScansConfigListResultList = Array; export declare const ScansConfigListResultList: S.Schema; export interface ListScanConfigsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: ScansConfigListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export declare const ListScanConfigsResponse: S.Schema; export type ThreatEventsAttackersListRequestDatasetIdsList = Array; export declare const ThreatEventsAttackersListRequestDatasetIdsList: S.Schema; export interface ListThreatEventAttackersRequest { /** Account ID. */ accountId: string; /** Array of dataset IDs to query attackers from. If not provided, uses the default dataset. */ datasetIds?: ThreatEventsAttackersListRequestDatasetIdsList; } export declare const ListThreatEventAttackersRequest: S.Schema; export interface ThreatEventsAttackersListResponseItems { type: string; } export declare const ThreatEventsAttackersListResponseItems: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListThreatEventAttackersResponse { items: ThreatEventsAttackersListResponseItems; type: string; } export declare const ListThreatEventAttackersResponse: S.Schema; export type ThreatEventsCategoriesListRequestDatasetIdsList = Array; export declare const ThreatEventsCategoriesListRequestDatasetIdsList: S.Schema; export interface ListThreatEventCategoriesRequest { /** Account ID. */ accountId: string; /** Array of dataset IDs to query categories from. If not provided, uses the default dataset. */ datasetIds?: ThreatEventsCategoriesListRequestDatasetIdsList; } export declare const ListThreatEventCategoriesRequest: S.Schema; export type ThreatEventsCategoriesListResponseMitreAttackList = Array; export declare const ThreatEventsCategoriesListResponseMitreAttackList: S.Schema; export type ThreatEventsCategoriesListResponseMitreCapecList = Array; export declare const ThreatEventsCategoriesListResponseMitreCapecList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListThreatEventCategoriesResponse { killChain: number; name: string; uuid: string; mitreAttack?: ThreatEventsCategoriesListResponseMitreAttackList | null; mitreCapec?: ThreatEventsCategoriesListResponseMitreCapecList | null; shortname?: string | null; } export declare const ListThreatEventCategoriesResponse: S.Schema; export interface ListThreatEventCountriesRequest { /** Account ID. */ accountId: string; } export declare const ListThreatEventCountriesRequest: S.Schema; export interface ThreatEventsCountriesListResultItem { alpha2: string; alpha3: string; name: string; } export declare const ThreatEventsCountriesListResultItem: S.Schema; export type ThreatEventsCountriesListResultList = Array; export declare const ThreatEventsCountriesListResultList: S.Schema; export type ListThreatEventCountriesResponse = ThreatEventsCountriesListResultList; export declare const ListThreatEventCountriesResponse: S.Schema; export interface ListThreatEventDatasetsRequest { /** Account ID. */ accountId: string; /** When true, include soft-deleted datasets in the response. Each item includes a `deletedAt` field (ISO 8601 or null). Default: false. */ includeDeleted?: boolean; } export declare const ListThreatEventDatasetsRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListThreatEventDatasetsResponse { isPublic: boolean; name: string; uuid: string; deletedAt?: string | null; } export declare const ListThreatEventDatasetsResponse: S.Schema; export interface ListThreatEventIndicatorTypesRequest { /** Account ID. */ accountId: string; } export declare const ListThreatEventIndicatorTypesRequest: S.Schema; export type ThreatEventsIndicatorTypesListResponseItems = ThreatEventsAttackersListResponseItems; export declare const ThreatEventsIndicatorTypesListResponseItems: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListThreatEventIndicatorTypesResponse { items: ThreatEventsAttackersListResponseItems; type: string; } export declare const ListThreatEventIndicatorTypesResponse: S.Schema; export type ThreatEventsListRequestDatasetIdList = Array; export declare const ThreatEventsListRequestDatasetIdList: S.Schema; export type ThreatEventsListRequestFormat = "json" | "stix2" | "taxii"; export declare const ThreatEventsListRequestFormat: any; export type ThreatEventsListRequestOrder = "asc" | "desc"; export declare const ThreatEventsListRequestOrder: any; export type ThreatEventsListRequestSearchList = Array; export declare const ThreatEventsListRequestSearchList: S.Schema; export type ThreatEventsListRequestSource = "do" | "r2catalog"; export declare const ThreatEventsListRequestSource: any; export interface ListThreatEventsRequest { /** Account ID. */ accountId: string; /** Cursor for pagination. When provided, filters are embedded in the cursor so you only need to pass cursor and pageSize. Returned in the previous response's result_info.cursor field. Use cursor-based pagination for deep pagination (beyond 100,000 records) or for optimal performance. */ cursor?: string; /** Dataset IDs to query events from (array of UUIDs), or special value 'all' or '*' to query all event datasets for the account. If not provided, uses the default dataset. */ datasetId?: ThreatEventsListRequestDatasetIdList; forceRefresh?: boolean; format?: ThreatEventsListRequestFormat | (string & {}); order?: ThreatEventsListRequestOrder | (string & {}); orderBy?: string; /** Page number (1-indexed) for offset-based pagination. Limited to offset of 100,000 records. For deep pagination, use cursor-based pagination instead. */ page?: number; /** Number of results per page. Maximum 25,000. */ pageSize?: number; search?: ThreatEventsListRequestSearchList; /** Read backend. 'do' (default) reads Durable Object storage. 'r2catalog' reads R2 Data Catalog (admin-only, experimental; supports a subset of search fields — no 'tags'). */ source?: ThreatEventsListRequestSource | (string & {}); } export declare const ListThreatEventsRequest: S.Schema; export type ThreatEventsListResponseMitreAttackList = Array; export declare const ThreatEventsListResponseMitreAttackList: S.Schema; export type ThreatEventsListResponseMitreCapecList = Array; export declare const ThreatEventsListResponseMitreCapecList: S.Schema; export type ThreatEventsListResponseReferencedList = Array; export declare const ThreatEventsListResponseReferencedList: S.Schema; export type ThreatEventsListResponseReferencedIdsList = Array; export declare const ThreatEventsListResponseReferencedIdsList: S.Schema; export type ThreatEventsListResponseReferencesList = Array; export declare const ThreatEventsListResponseReferencesList: S.Schema; export type ThreatEventsListResponseReferencesIdsList = Array; export declare const ThreatEventsListResponseReferencesIdsList: S.Schema; export type ThreatEventsListResponseTagsList = Array; export declare const ThreatEventsListResponseTagsList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListThreatEventsResponse { attacker: string; attackerCountry: string; attackerCountryAlpha3: string; category: string; datasetId: string; date: string; event: string; hasChildren: boolean; indicator: string; indicatorType: string; indicatorTypeId: number; killChain: number; mitreAttack: ThreatEventsListResponseMitreAttackList; mitreCapec: ThreatEventsListResponseMitreCapecList; numReferenced: number; numReferences: number; rawId: string; referenced: ThreatEventsListResponseReferencedList; referencedIds: ThreatEventsListResponseReferencedIdsList; references: ThreatEventsListResponseReferencesList; referencesIds: ThreatEventsListResponseReferencesIdsList; tags: ThreatEventsListResponseTagsList; targetCountry: string; targetCountryAlpha3: string; targetIndustry: string; tlp: string; uuid: string; insight?: string | null; releasabilityId?: string | null; } export declare const ListThreatEventsResponse: S.Schema; export type ThreatEventsTargetIndustriesListRequestDatasetIdsList = Array; export declare const ThreatEventsTargetIndustriesListRequestDatasetIdsList: S.Schema; export interface ListThreatEventTargetIndustriesRequest { /** Account ID. */ accountId: string; /** Array of dataset IDs to query target industries from. If not provided, uses the default dataset. */ datasetIds?: ThreatEventsTargetIndustriesListRequestDatasetIdsList; } export declare const ListThreatEventTargetIndustriesRequest: S.Schema; export type ThreatEventsTargetIndustriesListResponseItems = ThreatEventsAttackersListResponseItems; export declare const ThreatEventsTargetIndustriesListResponseItems: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListThreatEventTargetIndustriesResponse { items: ThreatEventsAttackersListResponseItems; type: string; } export declare const ListThreatEventTargetIndustriesResponse: S.Schema; export type ScansConfigEditRequestIpsList = Array; export declare const ScansConfigEditRequestIpsList: S.Schema; export type ScansConfigEditRequestPortsList = Array; export declare const ScansConfigEditRequestPortsList: S.Schema; export interface PatchScanConfigRequest { /** Defines the Account ID. */ accountId: string; /** Defines the Config ID. */ configId: string; /** Defines the number of days between each scan (0 = One-off scan). */ frequency?: number; /** Defines a list of IP addresses or CIDR blocks to scan. The maximum number of total IP addresses allowed is 5000. */ ips?: ScansConfigEditRequestIpsList; /** Defines a list of ports to scan. Valid values are:"default", "all", or a comma-separated list of ports or range of ports (e.g. ["1-80", "443"]). "default" scans the 100 most commonly open ports. */ ports?: ScansConfigEditRequestPortsList; } export declare const PatchScanConfigRequest: S.Schema; export type ScansConfigEditResponseIpsList = Array; export declare const ScansConfigEditResponseIpsList: S.Schema; export type ScansConfigEditResponsePortsList = Array; export declare const ScansConfigEditResponsePortsList: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchScanConfigResponse { /** Defines the Config ID. */ id: string; accountId: string; /** Defines the number of days between each scan (0 = One-off scan). */ frequency: number; /** Defines a list of IP addresses or CIDR blocks to scan. The maximum number of total IP addresses allowed is 5000. */ ips: ScansConfigEditResponseIpsList; /** Defines a list of ports to scan. Valid values are:"default", "all", or a comma-separated list of ports or range of ports (e.g. ["1-80", "443"]). "default" scans the 100 most commonly open ports. */ ports: ScansConfigEditResponsePortsList; } export declare const PatchScanConfigResponse: S.Schema; export type ThreatEventsEditRequestRawDataMap = { [key: string]: unknown | undefined; }; export declare const ThreatEventsEditRequestRawDataMap: S.Schema; export interface ThreatEventsEditRequestRaw { data?: ThreatEventsEditRequestRawDataMap; source?: string; tlp?: string; } export declare const ThreatEventsEditRequestRaw: S.Schema; export interface PatchThreatEventRequest { /** Account ID. */ accountId: string; /** Event UUID. */ eventId: string; /** Dataset ID containing the event to update. */ datasetId: string; attacker?: string; attackerCountry?: string; category?: string; createdAt?: string; date?: string; event?: string; indicator?: string; indicatorType?: string; insight?: string; raw?: ThreatEventsEditRequestRaw; targetCountry?: string; targetIndustry?: string; tlp?: string; } export declare const PatchThreatEventRequest: S.Schema; export type ThreatEventsEditResponseMitreAttackList = Array; export declare const ThreatEventsEditResponseMitreAttackList: S.Schema; export type ThreatEventsEditResponseMitreCapecList = Array; export declare const ThreatEventsEditResponseMitreCapecList: S.Schema; export type ThreatEventsEditResponseReferencedList = Array; export declare const ThreatEventsEditResponseReferencedList: S.Schema; export type ThreatEventsEditResponseReferencedIdsList = Array; export declare const ThreatEventsEditResponseReferencedIdsList: S.Schema; export type ThreatEventsEditResponseReferencesList = Array; export declare const ThreatEventsEditResponseReferencesList: S.Schema; export type ThreatEventsEditResponseReferencesIdsList = Array; export declare const ThreatEventsEditResponseReferencesIdsList: S.Schema; export type ThreatEventsEditResponseTagsList = Array; export declare const ThreatEventsEditResponseTagsList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface PatchThreatEventResponse { attacker: string; attackerCountry: string; attackerCountryAlpha3: string; category: string; datasetId: string; date: string; event: string; hasChildren: boolean; indicator: string; indicatorType: string; indicatorTypeId: number; killChain: number; mitreAttack: ThreatEventsEditResponseMitreAttackList; mitreCapec: ThreatEventsEditResponseMitreCapecList; numReferenced: number; numReferences: number; rawId: string; referenced: ThreatEventsEditResponseReferencedList; referencedIds: ThreatEventsEditResponseReferencedIdsList; references: ThreatEventsEditResponseReferencesList; referencesIds: ThreatEventsEditResponseReferencesIdsList; tags: ThreatEventsEditResponseTagsList; targetCountry: string; targetCountryAlpha3: string; targetIndustry: string; tlp: string; uuid: string; insight?: string | null; releasabilityId?: string | null; } export declare const PatchThreatEventResponse: S.Schema; export type ThreatEventsCategoriesEditRequestMitreAttackList = Array; export declare const ThreatEventsCategoriesEditRequestMitreAttackList: S.Schema; export type ThreatEventsCategoriesEditRequestMitreCapecList = Array; export declare const ThreatEventsCategoriesEditRequestMitreCapecList: S.Schema; export interface PatchThreatEventCategoryRequest { /** Account ID. */ accountId: string; /** Category UUID. */ categoryId: string; killChain?: number; mitreAttack?: ThreatEventsCategoriesEditRequestMitreAttackList; mitreCapec?: ThreatEventsCategoriesEditRequestMitreCapecList; name?: string; shortname?: string; } export declare const PatchThreatEventCategoryRequest: S.Schema; export type ThreatEventsCategoriesEditResponseMitreAttackList = Array; export declare const ThreatEventsCategoriesEditResponseMitreAttackList: S.Schema; export type ThreatEventsCategoriesEditResponseMitreCapecList = Array; export declare const ThreatEventsCategoriesEditResponseMitreCapecList: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface PatchThreatEventCategoryResponse { killChain: number; name: string; uuid: string; mitreAttack?: ThreatEventsCategoriesEditResponseMitreAttackList | null; mitreCapec?: ThreatEventsCategoriesEditResponseMitreCapecList | null; shortname?: string | null; } export declare const PatchThreatEventCategoryResponse: S.Schema; export interface PatchThreatEventDatasetRequest { /** Account ID. */ accountId: string; /** Dataset ID. */ datasetId: string; /** If true, then anyone can search the dataset. If false, then its limited to the account. */ isPublic: boolean; /** Used to describe the dataset within the account context. */ name: string; } export declare const PatchThreatEventDatasetRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface PatchThreatEventDatasetResponse { isPublic: boolean; name: string; uuid: string; deletedAt?: string | null; } export declare const PatchThreatEventDatasetResponse: S.Schema; export interface PatchThreatEventRawRequest { /** Account ID. */ accountId: string; /** Event UUID. */ eventId: string; /** Raw Event UUID. */ rawId: string; data?: unknown; source?: string; tlp?: string; } export declare const PatchThreatEventRawRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface PatchThreatEventRawResponse { id: string; data: unknown; } export declare const PatchThreatEventRawResponse: S.Schema; export interface QuotaRequestPriorityRequest { /** Identifier. */ accountId: string; } export declare const QuotaRequestPriorityRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface QuotaRequestPriorityResponse { /** Anniversary date is when annual quota limit is refreshed. */ anniversaryDate?: string | null; /** Quarter anniversary date is when quota limit is refreshed each quarter. */ quarterAnniversaryDate?: string | null; /** Tokens for the quarter. */ quota?: number | null; /** Tokens remaining for the quarter. */ remaining?: number | null; } export declare const QuotaRequestPriorityResponse: S.Schema; export interface RawThreatEventDatasetRequest { /** Account ID. */ accountId: string; /** Dataset ID. */ datasetId: string; /** Event ID. */ eventId: string; } export declare const RawThreatEventDatasetRequest: S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface RawThreatEventDatasetResponse { id: number; accountId: number; created: string; data: string; source: string; tlp: string; } export declare const RawThreatEventDatasetResponse: S.Schema; export interface RequestsAssetsGetRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; /** UUID. */ assetId: string; } export declare const RequestsAssetsGetRequest: S.Schema; export type RequestsAssetsGetResultItem = RequestsAssetsCreateResultItem; export declare const RequestsAssetsGetResultItem: S.Schema; export type RequestsAssetsGetResultList = Array; export declare const RequestsAssetsGetResultList: S.Schema; export type RequestsAssetsGetResponse = RequestsAssetsGetResultList; export declare const RequestsAssetsGetResponse: S.Schema; export interface RequestsConstantsRequest { /** Identifier. */ accountId: string; } export declare const RequestsConstantsRequest: S.Schema; export type RequestsConstantsResponsePriorityItem = "routine" | "high" | "urgent"; export declare const RequestsConstantsResponsePriorityItem: any; export type RequestsConstantsResponsePriorityList = Array; export declare const RequestsConstantsResponsePriorityList: S.Schema; export type RequestsConstantsResponseStatusItem = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsConstantsResponseStatusItem: any; export type RequestsConstantsResponseStatusList = Array; export declare const RequestsConstantsResponseStatusList: S.Schema; export type RequestsConstantsResponseTlpItem = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsConstantsResponseTlpItem: any; export type RequestsConstantsResponseTlpList = Array; export declare const RequestsConstantsResponseTlpList: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RequestsConstantsResponse { priority?: RequestsConstantsResponsePriorityList | null; status?: RequestsConstantsResponseStatusList | null; tlp?: RequestsConstantsResponseTlpList | null; } export declare const RequestsConstantsResponse: S.Schema; export interface RequestsDeleteRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; } export declare const RequestsDeleteRequest: S.Schema; export interface RequestsDeleteResponse { } export declare const RequestsDeleteResponse: S.Schema; export type RequestsListRequestSortOrder = "asc" | "desc"; export declare const RequestsListRequestSortOrder: any; export type RequestsListRequestStatus = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsListRequestStatus: any; export interface RequestsListRequest { /** Identifier. */ accountId: string; /** Page number of results. */ page: number; /** Number of results per page. */ perPage: number; /** Retrieve requests completed after this time. */ completedAfter?: string; /** Retrieve requests completed before this time. */ completedBefore?: string; /** Retrieve requests created after this time. */ createdAfter?: string; /** Retrieve requests created before this time. */ createdBefore?: string; /** Requested information from request. */ requestType?: string; /** Field to sort results by. */ sortBy?: string; /** Sort order (asc or desc). */ sortOrder?: RequestsListRequestSortOrder | (string & {}); /** Request Status. */ status?: RequestsListRequestStatus | (string & {}); } export declare const RequestsListRequest: S.Schema; export type RequestsListResultItemPriority = "routine" | "high" | "urgent"; export declare const RequestsListResultItemPriority: any; export type RequestsListResultItemTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsListResultItemTlp: any; export type RequestsListResultItemStatus = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsListResultItemStatus: any; export interface RequestsListResultItem { /** UUID. */ id: string; /** Request creation time. */ created: string; priority: RequestsListResultItemPriority; /** Requested information from request. */ request: string; /** Brief description of the request. */ summary: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsListResultItemTlp; /** Request last updated time. */ updated: string; /** Request completion time. */ completed?: string | null; /** Tokens for the request messages. */ messageTokens?: number | null; /** Readable Request ID. */ readableId?: string | null; /** Request Status. */ status?: RequestsListResultItemStatus | null; /** Tokens for the request. */ tokens?: number | null; } export declare const RequestsListResultItem: S.Schema; export type RequestsListResultList = Array; export declare const RequestsListResultList: S.Schema; export type RequestsListResponse = RequestsListResultList; export declare const RequestsListResponse: S.Schema; export interface RequestsQuotaRequest { /** Identifier. */ accountId: string; } export declare const RequestsQuotaRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RequestsQuotaResponse { /** Anniversary date is when annual quota limit is refreshed. */ anniversaryDate?: string | null; /** Quarter anniversary date is when quota limit is refreshed each quarter. */ quarterAnniversaryDate?: string | null; /** Tokens for the quarter. */ quota?: number | null; /** Tokens remaining for the quarter. */ remaining?: number | null; } export declare const RequestsQuotaResponse: S.Schema; export interface RequestsTypesRequest { /** Identifier. */ accountId: string; } export declare const RequestsTypesRequest: S.Schema; export type RequestsTypesResponse = unknown; export declare const RequestsTypesResponse: S.Schema; export type RequestsUpdateRequestTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsUpdateRequestTlp: any; export interface RequestsUpdateRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; /** Request content. */ content?: string; /** Priority for analyzing the request. */ priority?: string; /** Requested information from request. */ requestType?: string; /** Brief description of the request. */ summary?: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp?: RequestsUpdateRequestTlp | (string & {}); } export declare const RequestsUpdateRequest: S.Schema; export type RequestsUpdateResponseTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsUpdateResponseTlp: any; export type RequestsUpdateResponseStatus = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsUpdateResponseStatus: any; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RequestsUpdateResponse { /** UUID. */ id: string; /** Request content. */ content: string; created: string; priority: string; /** Requested information from request. */ request: string; /** Brief description of the request. */ summary: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsUpdateResponseTlp; updated: string; completed?: string | null; /** Tokens for the request messages. */ messageTokens?: number | null; /** Readable Request ID. */ readableId?: string | null; /** Request Status. */ status?: RequestsUpdateResponseStatus | null; /** Tokens for the request. */ tokens?: number | null; } export declare const RequestsUpdateResponse: S.Schema; export interface UpdateRequestAssetRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; /** UUID. */ assetId: string; /** Asset file to upload. */ source?: string; } export declare const UpdateRequestAssetRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateRequestAssetResponse { /** Asset ID. */ id: number; /** Asset name. */ name: string; /** Defines the asset creation time. */ created?: string | null; /** Asset description. */ description?: string | null; /** Asset file type. */ fileType?: string | null; } export declare const UpdateRequestAssetResponse: S.Schema; export interface UpdateRequestMessageRequest { /** Identifier. */ accountId: string; /** UUID. */ requestId: string; messageId: number; /** Content of message. */ content?: string; } export declare const UpdateRequestMessageRequest: S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateRequestMessageResponse { /** Message ID. */ id: number; /** Author of message. */ author: string; /** Content of message. */ content: string; /** Whether the message is a follow-on request. */ isFollowOnRequest: boolean; /** Defines the message last updated time. */ updated: string; /** Defines the message creation time. */ created?: string | null; } export declare const UpdateRequestMessageResponse: S.Schema; export type RequestsPriorityUpdateRequestLabelsList = Array; export declare const RequestsPriorityUpdateRequestLabelsList: S.Schema; export type RequestsPriorityUpdateRequestTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsPriorityUpdateRequestTlp: any; export interface UpdateRequestPriorityRequest { /** Identifier. */ accountId: string; /** UUID. */ priorityId: string; /** List of labels. */ labels: RequestsPriorityUpdateRequestLabelsList; /** Priority. */ priority: number; /** Requirement. */ requirement: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsPriorityUpdateRequestTlp | (string & {}); } export declare const UpdateRequestPriorityRequest: S.Schema; export type RequestsPriorityUpdateResponseTlp = "clear" | "amber" | "amber-strict" | "green" | "red"; export declare const RequestsPriorityUpdateResponseTlp: any; export type RequestsPriorityUpdateResponseStatus = "open" | "accepted" | "reported" | "approved" | "completed" | "declined"; export declare const RequestsPriorityUpdateResponseStatus: any; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateRequestPriorityResponse { /** UUID. */ id: string; /** Request content. */ content: string; created: string; priority: string; /** Requested information from request. */ request: string; /** Brief description of the request. */ summary: string; /** The CISA defined Traffic Light Protocol (TLP). */ tlp: RequestsPriorityUpdateResponseTlp; updated: string; completed?: string | null; /** Tokens for the request messages. */ messageTokens?: number | null; /** Readable Request ID. */ readableId?: string | null; /** Request Status. */ status?: RequestsPriorityUpdateResponseStatus | null; /** Tokens for the request. */ tokens?: number | null; } export declare const UpdateRequestPriorityResponse: S.Schema; export type BulkCreateThreatEventsError = CloudflareOpError; /** The `datasetId` parameter must be defined. To list existing datasets (and their IDs) in your account, use the [`List Datasets`](https://developers.cloudflare.com/api/resources/cloudforce_one/subresources/threat_events/subresources/datasets/methods/list/) endpoint. */ export declare const bulkCreateThreatEvents: API.OperationMethod; export type CreateBinaryStorageError = CloudflareOpError; /** Uploads a binary file to Cloudforce One's binary database for malware analysis and threat intelligence correlation. */ export declare const createBinaryStorage: API.OperationMethod; export type CreateRequestError = CloudflareOpError; /** Creating a request adds the request into the Cloudforce One queue for analysis. In addition to the content, a short title, type, priority, and releasability should be provided. If one is not provided, a default will be assigned. */ export declare const createRequest: API.OperationMethod; export type CreateRequestAssetError = CloudflareOpError; /** Lists assets attached to a Cloudforce One intelligence request. */ export declare const createRequestAsset: API.PaginatedOperationMethod; export type CreateRequestMessageError = CloudflareOpError; /** Adds a message to a Cloudforce One intelligence request conversation. */ export declare const createRequestMessage: API.OperationMethod; export type CreateRequestPriorityError = CloudflareOpError; /** Creates a new priority intelligence request in Cloudforce One. */ export declare const createRequestPriority: API.OperationMethod; export type CreateScanConfigError = CloudflareOpError; /** Create a new Scan Config */ export declare const createScanConfig: API.OperationMethod; export type CreateThreatEventError = CloudflareOpError; /** To create a dataset, see the [`Create Dataset`](https://developers.cloudflare.com/api/resources/cloudforce_one/subresources/threat_events/subresources/datasets/methods/create/) endpoint. When `datasetId` parameter is unspecified, it will be created in a default dataset named `Cloudforce One Threat Events`. */ export declare const createThreatEvent: API.OperationMethod; export type CreateThreatEventCategoryError = CloudflareOpError; /** Creates a new category */ export declare const createThreatEventCategory: API.OperationMethod; export type CreateThreatEventDatasetError = CloudflareOpError; /** Creates a dataset */ export declare const createThreatEventDataset: API.OperationMethod; export type CreateThreatEventEventTagError = CloudflareOpError; /** Adds a tag to an event */ export declare const createThreatEventEventTag: API.OperationMethod; export type CreateThreatEventTagError = CloudflareOpError; /** Creates a new tag to be used accross threat events. */ export declare const createThreatEventTag: API.OperationMethod; export type DeleteRequestAssetError = CloudflareOpError; /** Removes an asset from a Cloudforce One intelligence request. */ export declare const deleteRequestAsset: API.OperationMethod; export type DeleteRequestMessageError = CloudflareOpError; /** Removes a message from a Cloudforce One intelligence request thread. */ export declare const deleteRequestMessage: API.OperationMethod; export type DeleteRequestPriorityError = CloudflareOpError; /** Deletes a priority intelligence request from Cloudforce One. */ export declare const deleteRequestPriority: API.OperationMethod; export type DeleteScanConfigError = ScanConfigNotFound | CloudflareOpError; /** Delete a Scan Config */ export declare const deleteScanConfig: API.OperationMethod; export type DeleteThreatEventCategoryError = CloudflareOpError; /** Deletes a category */ export declare const deleteThreatEventCategory: API.OperationMethod; export type DeleteThreatEventEventTagError = CloudflareOpError; /** Removes a tag from an event */ export declare const deleteThreatEventEventTag: API.OperationMethod; export type DeleteThreatEventRelateError = CloudflareOpError; /** Removes an event reference */ export declare const deleteThreatEventRelate: API.OperationMethod; export type GetBinaryStorageError = CloudflareOpError; /** Retrieves a binary file from the Cloudforce One binary storage for analysis. */ export declare const getBinaryStorage: API.OperationMethod; export type GetRequestError = CloudflareOpError; /** Retrieves details for a specific Cloudforce One intelligence request. */ export declare const getRequest: API.OperationMethod; export type GetRequestMessageError = CloudflareOpError; /** Lists messages in a Cloudforce One intelligence request conversation. */ export declare const getRequestMessage: API.PaginatedOperationMethod; export type GetRequestPriorityError = CloudflareOpError; /** Retrieves a specific priority intelligence request from Cloudforce One. */ export declare const getRequestPriority: API.OperationMethod; export type GetScanResultError = CloudflareOpError; /** Get the Latest Scan Result */ export declare const getScanResult: API.OperationMethod; export type GetThreatEventError = CloudflareOpError; /** This Method is deprecated. Please use /events/dataset/:dataset_id/events/:event_id instead. */ export declare const getThreatEvent: API.OperationMethod; export type GetThreatEventCategoryError = CloudflareOpError; /** Reads a category */ export declare const getThreatEventCategory: API.OperationMethod; export type GetThreatEventDatasetError = CloudflareOpError; /** Reads a dataset */ export declare const getThreatEventDataset: API.OperationMethod; export type GetThreatEventRawError = CloudflareOpError; /** Reads data for a raw event */ export declare const getThreatEventRaw: API.OperationMethod; export type ListScanConfigsError = CloudflareOpError; /** List Scan Configs */ export declare const listScanConfigs: API.PaginatedOperationMethod; export type ListThreatEventAttackersError = CloudflareOpError; /** Lists attackers across multiple datasets */ export declare const listThreatEventAttackers: API.OperationMethod; export type ListThreatEventCategoriesError = CloudflareOpError; /** Lists categories across multiple datasets */ export declare const listThreatEventCategories: API.OperationMethod; export type ListThreatEventCountriesError = CloudflareOpError; /** Retrieves countries information for all countries */ export declare const listThreatEventCountries: API.OperationMethod; export type ListThreatEventDatasetsError = CloudflareOpError; /** Lists all datasets in an account */ export declare const listThreatEventDatasets: API.OperationMethod; export type ListThreatEventIndicatorTypesError = CloudflareOpError; /** This Method is deprecated. Please use /events/dataset/:dataset_id/indicatorTypes instead. */ export declare const listThreatEventIndicatorTypes: API.OperationMethod; export type ListThreatEventsError = CloudflareOpError; /** Use `datasetId=all` or `datasetId=*` to query all event datasets for the account (limited to 10). When `datasetId` is unspecified, events are listed from the default Cloudforce One Threat Events dataset. To list existing datasets, use the [`List Datasets`](https://developers.cloudflare.com/api/resources/cloudforce_one/subresources/threat_events/subresources/datasets/methods/list/) endpoint. */ export declare const listThreatEvents: API.OperationMethod; export type ListThreatEventTargetIndustriesError = CloudflareOpError; /** Lists target industries across multiple datasets */ export declare const listThreatEventTargetIndustries: API.OperationMethod; export type PatchScanConfigError = ScanConfigNotFound | CloudflareOpError; /** Update an existing Scan Config */ export declare const patchScanConfig: API.OperationMethod; export type PatchThreatEventError = CloudflareOpError; /** Updates an event */ export declare const patchThreatEvent: API.OperationMethod; export type PatchThreatEventCategoryError = CloudflareOpError; /** Updates a category */ export declare const patchThreatEventCategory: API.OperationMethod; export type PatchThreatEventDatasetError = CloudflareOpError; /** Updates an existing dataset */ export declare const patchThreatEventDataset: API.OperationMethod; export type PatchThreatEventRawError = CloudflareOpError; /** Updates a raw event */ export declare const patchThreatEventRaw: API.OperationMethod; export type QuotaRequestPriorityError = CloudflareOpError; /** Retrieves quota usage for Cloudforce One priority requests. */ export declare const quotaRequestPriority: API.OperationMethod; export type RawThreatEventDatasetError = CloudflareOpError; /** Retrieves the raw data associated with an event. Searches across all shards in the dataset. */ export declare const rawThreatEventDataset: API.OperationMethod; export type RequestsAssetsGetError = CloudflareOpError; /** Retrieves an asset attached to a Cloudforce One intelligence request. */ export declare const requestsAssetsGet: API.OperationMethod; export type RequestsConstantsError = CloudflareOpError; /** Retrieves constant values used in Cloudforce One requests, including valid statuses and types. */ export declare const requestsConstants: API.OperationMethod; export type RequestsDeleteError = CloudflareOpError; /** Deletes a Cloudforce One intelligence request and all associated data. */ export declare const requestsDelete: API.OperationMethod; export type RequestsListError = CloudflareOpError; /** Lists Cloudforce One intelligence requests with filtering and pagination. */ export declare const requestsList: API.OperationMethod; export type RequestsQuotaError = CloudflareOpError; /** Retrieves quota usage for Cloudforce One standard requests. */ export declare const requestsQuota: API.OperationMethod; export type RequestsTypesError = CloudflareOpError; /** Lists available request types for Cloudforce One intelligence requests. */ export declare const requestsTypes: API.OperationMethod; export type RequestsUpdateError = CloudflareOpError; /** Updating a request alters the request in the Cloudforce One queue. This API may be used to update any attributes of the request after the initial submission. Only fields that you choose to update need to be add to the request body. */ export declare const requestsUpdate: API.OperationMethod; export type UpdateRequestAssetError = CloudflareOpError; /** Updates an asset in a Cloudforce One intelligence request. */ export declare const updateRequestAsset: API.OperationMethod; export type UpdateRequestMessageError = CloudflareOpError; /** Updates a message in a Cloudforce One intelligence request thread. */ export declare const updateRequestMessage: API.OperationMethod; export type UpdateRequestPriorityError = CloudflareOpError; /** Updates a priority intelligence request in Cloudforce One. */ export declare const updateRequestPriority: API.OperationMethod; //# sourceMappingURL=cloudforce_one.d.ts.map