import { BaseAPIRequestFactory } from "../../datadog-api-client-common/baseapi";
import { Configuration } from "../../datadog-api-client-common/configuration";
import { RequestContext, ResponseContext } from "../../datadog-api-client-common/http/http";
import { STIXBundleRequest } from "../models/STIXBundleRequest";
import { STIXContentEncoding } from "../models/STIXContentEncoding";
import { STIXIngestResponse } from "../models/STIXIngestResponse";
export declare class ThreatIntelligenceApiRequestFactory extends BaseAPIRequestFactory {
    addSTIXThreatIntel(tiVendor: string, body: STIXBundleRequest, contentEncoding?: STIXContentEncoding, _options?: Configuration): Promise<RequestContext>;
}
export declare class ThreatIntelligenceApiResponseProcessor {
    /**
     * Unwraps the actual response sent by the server from the response context and deserializes the response content
     * to the expected objects
     *
     * @params response Response returned by the server for a request to addSTIXThreatIntel
     * @throws ApiException if the response code was not in [200, 299]
     */
    addSTIXThreatIntel(response: ResponseContext): Promise<STIXIngestResponse>;
}
export interface ThreatIntelligenceApiAddSTIXThreatIntelRequest {
    /**
     * Vendor identifier for the feed. The value must not exceed 10 characters. Datadog normalizes the accepted value to lowercase, converts non-alphanumeric characters to underscores, and trims leading and trailing underscores.
     * @type string
     */
    tiVendor: string;
    /**
     * A STIX 2.1 bundle containing indicator objects. The request body must not exceed 50 MB as received or 100 MB after decompression.
     * @type STIXBundleRequest
     */
    body: STIXBundleRequest;
    /**
     * Content encoding for the request body. Use gzip for a compressed STIX bundle.
     * @type STIXContentEncoding
     */
    contentEncoding?: STIXContentEncoding;
}
export declare class ThreatIntelligenceApi {
    private requestFactory;
    private responseProcessor;
    private configuration;
    constructor(configuration: Configuration, requestFactory?: ThreatIntelligenceApiRequestFactory, responseProcessor?: ThreatIntelligenceApiResponseProcessor);
    /**
     * Ingest a STIX 2.1 bundle containing threat intelligence indicators. Only indicator objects are processed. Supported indicator patterns contain IPv4 addresses, IPv6 addresses, domain names, or SHA-256 file hashes.
     *
     * Non-indicator objects are ignored and are not included in the response counters. Indicator objects with unsupported STIX versions or patterns that produce no supported observable values increment the `unsupported` counter. Patterns that cannot be parsed increment the `invalid` counter. Processing is best effort, so valid supported indicators in the same bundle are still added.
     *
     * A successful response means ingestion has completed. Reference-table materialization and enrichment happen asynchronously. Requests are limited to 50 MB as received, 100 MB after decompression, and 10 requests per second per API key. Gzip-compressed request bodies are supported.
     * @param param The request object
     */
    addSTIXThreatIntel(param: ThreatIntelligenceApiAddSTIXThreatIntelRequest, options?: Configuration): Promise<STIXIngestResponse>;
}