Skip to content
Cloudflare API
Start here
API Reference

Cloudforce One

Cloudforce OneBinary Storage

Retrieves a file from Binary Storage
client.CloudforceOne.BinaryStorage.Get(ctx, hash, query) error
GET/accounts/{account_id}/cloudforce-one/binary/{hash}
Posts a file to Binary Storage
client.CloudforceOne.BinaryStorage.New(ctx, params) (*BinaryStorageNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/binary

Cloudforce OneRequests

List Requests
client.CloudforceOne.Requests.List(ctx, params) (*SinglePage[ListItem], error)
POST/accounts/{account_id}/cloudforce-one/requests
Get a Request
client.CloudforceOne.Requests.Get(ctx, requestID, query) (*Item, error)
GET/accounts/{account_id}/cloudforce-one/requests/{request_id}
Create a New Request.
client.CloudforceOne.Requests.New(ctx, params) (*Item, error)
POST/accounts/{account_id}/cloudforce-one/requests/new
Update a Request
client.CloudforceOne.Requests.Update(ctx, requestID, params) (*Item, error)
PUT/accounts/{account_id}/cloudforce-one/requests/{request_id}
Delete a Request
client.CloudforceOne.Requests.Delete(ctx, requestID, body) (*RequestDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/requests/{request_id}
Get Request Quota
client.CloudforceOne.Requests.Quota(ctx, query) (*Quota, error)
GET/accounts/{account_id}/cloudforce-one/requests/quota
Get Request Types
client.CloudforceOne.Requests.Types(ctx, query) (*SinglePage[string], error)
GET/accounts/{account_id}/cloudforce-one/requests/types
Get Request Priority, Status, and TLP constants
client.CloudforceOne.Requests.Constants(ctx, query) (*RequestConstants, error)
GET/accounts/{account_id}/cloudforce-one/requests/constants
ModelsExpand Collapse
type Item struct{…}
ID string

UUID.

maxLength36
Content string

Request content.

Created Time
formatdate-time
Priority Time
formatdate-time
Request string

Requested information from request.

Summary string

Brief description of the request.

TLP ItemTLP

The CISA defined Traffic Light Protocol (TLP).

One of the following:
const ItemTLPClear ItemTLP = "clear"
const ItemTLPAmber ItemTLP = "amber"
const ItemTLPAmberStrict ItemTLP = "amber-strict"
const ItemTLPGreen ItemTLP = "green"
const ItemTLPRed ItemTLP = "red"
Updated Time
formatdate-time
Completed TimeOptional
formatdate-time
MessageTokens int64Optional

Tokens for the request messages.

ReadableID stringOptional

Readable Request ID.

Status ItemStatusOptional

Request Status.

One of the following:
const ItemStatusOpen ItemStatus = "open"
const ItemStatusAccepted ItemStatus = "accepted"
const ItemStatusReported ItemStatus = "reported"
const ItemStatusApproved ItemStatus = "approved"
const ItemStatusCompleted ItemStatus = "completed"
const ItemStatusDeclined ItemStatus = "declined"
Tokens int64Optional

Tokens for the request.

type ListItem struct{…}
ID string

UUID.

maxLength36
Created Time

Request creation time.

formatdate-time
Priority ListItemPriority
One of the following:
const ListItemPriorityRoutine ListItemPriority = "routine"
const ListItemPriorityHigh ListItemPriority = "high"
const ListItemPriorityUrgent ListItemPriority = "urgent"
Request string

Requested information from request.

Summary string

Brief description of the request.

TLP ListItemTLP

The CISA defined Traffic Light Protocol (TLP).

One of the following:
const ListItemTLPClear ListItemTLP = "clear"
const ListItemTLPAmber ListItemTLP = "amber"
const ListItemTLPAmberStrict ListItemTLP = "amber-strict"
const ListItemTLPGreen ListItemTLP = "green"
const ListItemTLPRed ListItemTLP = "red"
Updated Time

Request last updated time.

formatdate-time
Completed TimeOptional

Request completion time.

formatdate-time
MessageTokens int64Optional

Tokens for the request messages.

ReadableID stringOptional

Readable Request ID.

Status ListItemStatusOptional

Request Status.

One of the following:
const ListItemStatusOpen ListItemStatus = "open"
const ListItemStatusAccepted ListItemStatus = "accepted"
const ListItemStatusReported ListItemStatus = "reported"
const ListItemStatusApproved ListItemStatus = "approved"
const ListItemStatusCompleted ListItemStatus = "completed"
const ListItemStatusDeclined ListItemStatus = "declined"
Tokens int64Optional

Tokens for the request.

type Quota struct{…}
AnniversaryDate TimeOptional

Anniversary date is when annual quota limit is refreshed.

formatdate-time
QuarterAnniversaryDate TimeOptional

Quarter anniversary date is when quota limit is refreshed each quarter.

formatdate-time
Quota int64Optional

Tokens for the quarter.

Remaining int64Optional

Tokens remaining for the quarter.

type RequestConstants struct{…}
Priority []RequestConstantsPriorityOptional
One of the following:
const RequestConstantsPriorityRoutine RequestConstantsPriority = "routine"
const RequestConstantsPriorityHigh RequestConstantsPriority = "high"
const RequestConstantsPriorityUrgent RequestConstantsPriority = "urgent"
Status []RequestConstantsStatusOptional
One of the following:
const RequestConstantsStatusOpen RequestConstantsStatus = "open"
const RequestConstantsStatusAccepted RequestConstantsStatus = "accepted"
const RequestConstantsStatusReported RequestConstantsStatus = "reported"
const RequestConstantsStatusApproved RequestConstantsStatus = "approved"
const RequestConstantsStatusCompleted RequestConstantsStatus = "completed"
const RequestConstantsStatusDeclined RequestConstantsStatus = "declined"
TLP []RequestConstantsTLPOptional
One of the following:
const RequestConstantsTLPClear RequestConstantsTLP = "clear"
const RequestConstantsTLPAmber RequestConstantsTLP = "amber"
const RequestConstantsTLPAmberStrict RequestConstantsTLP = "amber-strict"
const RequestConstantsTLPGreen RequestConstantsTLP = "green"
const RequestConstantsTLPRed RequestConstantsTLP = "red"
type RequestTypes []string

Cloudforce OneRequestsMessage

List Request Messages
client.CloudforceOne.Requests.Message.Get(ctx, requestID, params) (*SinglePage[Message], error)
POST/accounts/{account_id}/cloudforce-one/requests/{request_id}/message
Create a New Request Message
client.CloudforceOne.Requests.Message.New(ctx, requestID, params) (*Message, error)
POST/accounts/{account_id}/cloudforce-one/requests/{request_id}/message/new
Update a Request Message
client.CloudforceOne.Requests.Message.Update(ctx, requestID, messageID, params) (*Message, error)
PUT/accounts/{account_id}/cloudforce-one/requests/{request_id}/message/{message_id}
Delete a Request Message
client.CloudforceOne.Requests.Message.Delete(ctx, requestID, messageID, body) (*RequestMessageDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/requests/{request_id}/message/{message_id}
ModelsExpand Collapse
type Message struct{…}
ID int64

Message ID.

Author string

Author of message.

Content string

Content of message.

IsFollowOnRequest bool

Whether the message is a follow-on request.

Updated Time

Defines the message last updated time.

formatdate-time
Created TimeOptional

Defines the message creation time.

formatdate-time

Cloudforce OneRequestsPriority

Get a Priority Intelligence Requirement
client.CloudforceOne.Requests.Priority.Get(ctx, priorityID, query) (*Item, error)
GET/accounts/{account_id}/cloudforce-one/requests/priority/{priority_id}
Create a New Priority Intelligence Requirement
client.CloudforceOne.Requests.Priority.New(ctx, params) (*Priority, error)
POST/accounts/{account_id}/cloudforce-one/requests/priority/new
Update a Priority Intelligence Requirement
client.CloudforceOne.Requests.Priority.Update(ctx, priorityID, params) (*Item, error)
PUT/accounts/{account_id}/cloudforce-one/requests/priority/{priority_id}
Delete a Priority Intelligence Requirement
client.CloudforceOne.Requests.Priority.Delete(ctx, priorityID, body) (*RequestPriorityDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/requests/priority/{priority_id}
Get Priority Intelligence Requirement Quota
client.CloudforceOne.Requests.Priority.Quota(ctx, query) (*Quota, error)
GET/accounts/{account_id}/cloudforce-one/requests/priority/quota
ModelsExpand Collapse
type Label string
type Priority struct{…}
ID string

UUID.

maxLength36
Created Time

Priority creation time.

formatdate-time
Labels []Label

List of labels.

Priority int64

Priority.

Requirement string

Requirement.

TLP PriorityTLP

The CISA defined Traffic Light Protocol (TLP).

One of the following:
const PriorityTLPClear PriorityTLP = "clear"
const PriorityTLPAmber PriorityTLP = "amber"
const PriorityTLPAmberStrict PriorityTLP = "amber-strict"
const PriorityTLPGreen PriorityTLP = "green"
const PriorityTLPRed PriorityTLP = "red"
Updated Time

Priority last updated time.

formatdate-time
type PriorityEdit struct{…}
Labels []Label

List of labels.

Priority int64

Priority.

Requirement string

Requirement.

TLP PriorityEditTLP

The CISA defined Traffic Light Protocol (TLP).

One of the following:
const PriorityEditTLPClear PriorityEditTLP = "clear"
const PriorityEditTLPAmber PriorityEditTLP = "amber"
const PriorityEditTLPAmberStrict PriorityEditTLP = "amber-strict"
const PriorityEditTLPGreen PriorityEditTLP = "green"
const PriorityEditTLPRed PriorityEditTLP = "red"

Cloudforce OneRequestsAssets

Get a Request Asset
client.CloudforceOne.Requests.Assets.Get(ctx, requestID, assetID, query) (*SinglePage[RequestAssetGetResponse], error)
GET/accounts/{account_id}/cloudforce-one/requests/{request_id}/asset/{asset_id}
List Request Assets
client.CloudforceOne.Requests.Assets.New(ctx, requestID, params) (*SinglePage[RequestAssetNewResponse], error)
POST/accounts/{account_id}/cloudforce-one/requests/{request_id}/asset
Update a Request Asset
client.CloudforceOne.Requests.Assets.Update(ctx, requestID, assetID, params) (*RequestAssetUpdateResponse, error)
PUT/accounts/{account_id}/cloudforce-one/requests/{request_id}/asset/{asset_id}
Delete a Request Asset
client.CloudforceOne.Requests.Assets.Delete(ctx, requestID, assetID, body) (*RequestAssetDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/requests/{request_id}/asset/{asset_id}

Cloudforce OneScans

Cloudforce OneScansResults

Get the Latest Scan Result
client.CloudforceOne.Scans.Results.Get(ctx, configID, query) (*ScanResultGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/scans/results/{config_id}
ModelsExpand Collapse
type ScanResult struct{…}
Number float64Optional
Proto stringOptional
Status stringOptional

Cloudforce OneScansConfig

List Scan Configs
client.CloudforceOne.Scans.Config.List(ctx, query) (*SinglePage[ScanConfigListResponse], error)
GET/accounts/{account_id}/cloudforce-one/scans/config
Create a new Scan Config
client.CloudforceOne.Scans.Config.New(ctx, params) (*ScanConfigNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/scans/config
Update an existing Scan Config
client.CloudforceOne.Scans.Config.Edit(ctx, configID, params) (*ScanConfigEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/scans/config/{config_id}
Delete a Scan Config
client.CloudforceOne.Scans.Config.Delete(ctx, configID, body) (*ScanConfigDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/scans/config/{config_id}

Cloudforce OneThreat Events

List events
client.CloudforceOne.ThreatEvents.List(ctx, params) (*[]ThreatEventListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events
Get an event (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Get(ctx, eventID, query) (*ThreatEventGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/{event_id}
Create an event
client.CloudforceOne.ThreatEvents.New(ctx, params) (*ThreatEventNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/create
Update an event
client.CloudforceOne.ThreatEvents.Edit(ctx, eventID, params) (*ThreatEventEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/events/{event_id}
Create events in bulk
client.CloudforceOne.ThreatEvents.BulkNew(ctx, params) (*ThreatEventBulkNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/create/bulk
Create events with relationships in bulk (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.BulkNewRelationships(ctx, params) (*ThreatEventBulkNewRelationshipsResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/create/bulk/relationships

Cloudforce OneThreat EventsAggregate

Aggregate events
client.CloudforceOne.ThreatEvents.Aggregate.List(ctx, params) (*ThreatEventAggregateListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/aggregate

Cloudforce OneThreat EventsGraphql

Run a GraphQL aggregation over events
client.CloudforceOne.ThreatEvents.Graphql.New(ctx, body) (*ThreatEventGraphqlNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/graphql

Cloudforce OneThreat EventsGraph

Query graph neighborhood from R2 Data Catalog
client.CloudforceOne.ThreatEvents.Graph.List(ctx, params) (*ThreatEventGraphListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/graph

Cloudforce OneThreat EventsQueries

List saved event queries
client.CloudforceOne.ThreatEvents.Queries.List(ctx, query) (*[]ThreatEventQueryListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/queries
Create a saved event query
client.CloudforceOne.ThreatEvents.Queries.New(ctx, params) (*ThreatEventQueryNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/queries/create
Get a saved event query
client.CloudforceOne.ThreatEvents.Queries.Get(ctx, queryID, query) (*ThreatEventQueryGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/queries/{query_id}
Update a saved event query
client.CloudforceOne.ThreatEvents.Queries.Edit(ctx, queryID, params) (*ThreatEventQueryEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/events/queries/{query_id}
Delete a saved event query
client.CloudforceOne.ThreatEvents.Queries.Delete(ctx, queryID, body) error
DELETE/accounts/{account_id}/cloudforce-one/events/queries/{query_id}

Cloudforce OneThreat EventsRelationships

List related events (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Relationships.List(ctx, eventID, params) (*[]ThreatEventRelationshipListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/{event_id}/relationships

Cloudforce OneThreat EventsIndicators

List indicators
client.CloudforceOne.ThreatEvents.Indicators.List(ctx, params) (*ThreatEventIndicatorListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/indicators

Cloudforce OneThreat EventsIndicatorsAggregate

Aggregate indicators by column(s)
client.CloudforceOne.ThreatEvents.Indicators.Aggregate.List(ctx, params) (*ThreatEventIndicatorAggregateListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/indicators/aggregate

Cloudforce OneThreat EventsIndicatorsTypes

List indicator types
client.CloudforceOne.ThreatEvents.Indicators.Types.List(ctx, params) (*ThreatEventIndicatorTypeListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/indicator-types

Cloudforce OneThreat EventsIndicatorsBy Dataset

List indicators in a dataset (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Indicators.ByDataset.List(ctx, datasetID, params) (*ThreatEventIndicatorByDatasetListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators
Get an indicator
client.CloudforceOne.ThreatEvents.Indicators.ByDataset.Get(ctx, datasetID, indicatorID, query) (*ThreatEventIndicatorByDatasetGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/{indicator_id}

Cloudforce OneThreat EventsIndicatorsBy DatasetTags

List tags on a dataset's indicators
client.CloudforceOne.ThreatEvents.Indicators.ByDataset.Tags.List(ctx, datasetID, query) (*[]ThreatEventIndicatorByDatasetTagListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/tags

Cloudforce OneThreat EventsAttackers

List attackers
client.CloudforceOne.ThreatEvents.Attackers.List(ctx, params) (*ThreatEventAttackerListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/attackers

Cloudforce OneThreat EventsCategories

List event categories used in datasets
client.CloudforceOne.ThreatEvents.Categories.List(ctx, params) (*[]ThreatEventCategoryListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/categories
Get an event category (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Categories.Get(ctx, categoryID, query) (*ThreatEventCategoryGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/categories/{category_id}
Create an event category
client.CloudforceOne.ThreatEvents.Categories.New(ctx, params) (*ThreatEventCategoryNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/categories/create
Update an event category (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Categories.Edit(ctx, categoryID, params) (*ThreatEventCategoryEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/events/categories/{category_id}
Delete an event category (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Categories.Delete(ctx, categoryID, body) (*ThreatEventCategoryDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/events/categories/{category_id}

Cloudforce OneThreat EventsCategoriesCatalog

List all event categories
client.CloudforceOne.ThreatEvents.Categories.Catalog.List(ctx, query) (*[]ThreatEventCategoryCatalogListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/categories/catalog

Cloudforce OneThreat EventsCountries

List countries
client.CloudforceOne.ThreatEvents.Countries.List(ctx, query) (*[]ThreatEventCountryListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/countries

Cloudforce OneThreat EventsCrons

Cloudforce OneThreat EventsDatasets

List datasets
client.CloudforceOne.ThreatEvents.Datasets.List(ctx, params) (*[]ThreatEventDatasetListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset
Get a dataset
client.CloudforceOne.ThreatEvents.Datasets.Get(ctx, datasetID, query) (*ThreatEventDatasetGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}
Create a dataset
client.CloudforceOne.ThreatEvents.Datasets.New(ctx, params) (*ThreatEventDatasetNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/dataset/create
Update a dataset
client.CloudforceOne.ThreatEvents.Datasets.Edit(ctx, datasetID, params) (*ThreatEventDatasetEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}
Delete a dataset
client.CloudforceOne.ThreatEvents.Datasets.Delete(ctx, datasetID, body) (*ThreatEventDatasetDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}
Get raw data for an event (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Datasets.Raw(ctx, datasetID, eventID, query) (*ThreatEventDatasetRawResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/raw/{dataset_id}/{event_id}

Cloudforce OneThreat EventsDatasetsHealth

Cloudforce OneThreat EventsDatasetsEvents

Get an event
client.CloudforceOne.ThreatEvents.Datasets.Events.Get(ctx, datasetID, eventID, query) (*ThreatEventDatasetEventGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/events/{event_id}

Cloudforce OneThreat EventsRaw

Get raw event data by raw ID (legacy)
client.CloudforceOne.ThreatEvents.Raw.Get(ctx, eventID, rawID, query) (*ThreatEventRawGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/{event_id}/raw/{raw_id}
Update raw event data by raw ID (legacy)
client.CloudforceOne.ThreatEvents.Raw.Edit(ctx, eventID, rawID, params) (*ThreatEventRawEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/events/{event_id}/raw/{raw_id}

Cloudforce OneThreat EventsRelate

Remove event references (legacy)
client.CloudforceOne.ThreatEvents.Relate.Delete(ctx, eventID, body) (*ThreatEventRelateDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/events/relate/{event_id}

Cloudforce OneThreat EventsTags

List tags
client.CloudforceOne.ThreatEvents.Tags.List(ctx, params) (*ThreatEventTagListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/tags
Create a tag
client.CloudforceOne.ThreatEvents.Tags.New(ctx, params) (*ThreatEventTagNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/tags/create
Update a tag
client.CloudforceOne.ThreatEvents.Tags.Edit(ctx, tagUUID, params) (*ThreatEventTagEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}
Delete a tag
client.CloudforceOne.ThreatEvents.Tags.Delete(ctx, tagUUID, body) (*ThreatEventTagDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}

Cloudforce OneThreat EventsTagsCategories

List tag categories
client.CloudforceOne.ThreatEvents.Tags.Categories.List(ctx, params) (*ThreatEventTagCategoryListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/tags/categories
Create a tag category
client.CloudforceOne.ThreatEvents.Tags.Categories.New(ctx, params) (*ThreatEventTagCategoryNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/tags/categories/create
Update a tag category (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Tags.Categories.Edit(ctx, categoryUUID, params) (*ThreatEventTagCategoryEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid}
Delete a tag category (legacy)
Deprecated
client.CloudforceOne.ThreatEvents.Tags.Categories.Delete(ctx, categoryUUID, body) (*ThreatEventTagCategoryDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid}

Cloudforce OneThreat EventsTagsIndicators

List a tag's indicators
client.CloudforceOne.ThreatEvents.Tags.Indicators.List(ctx, tagUUID, params) (*ThreatEventTagIndicatorListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}/indicators

Cloudforce OneThreat EventsTagsIndicatorsBy Dataset

List indicators related to a tag within a dataset (deprecated)
Deprecated
client.CloudforceOne.ThreatEvents.Tags.Indicators.ByDataset.List(ctx, datasetID, tagUUID, params) (*ThreatEventTagIndicatorByDatasetListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/tags/{tag_uuid}/indicators

Cloudforce OneThreat EventsEvent Tags

Add tags to an event (legacy)
client.CloudforceOne.ThreatEvents.EventTags.New(ctx, eventID, params) (*ThreatEventEventTagNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/events/event_tag/{event_id}/create
Remove tags from an event (legacy)
client.CloudforceOne.ThreatEvents.EventTags.Delete(ctx, eventID, body) (*ThreatEventEventTagDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/events/event_tag/{event_id}

Cloudforce OneThreat EventsTarget Industries

List target industries used in datasets
client.CloudforceOne.ThreatEvents.TargetIndustries.List(ctx, params) (*ThreatEventTargetIndustryListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/targetIndustries

Cloudforce OneThreat EventsTarget IndustriesBy Dataset

List target industries in a dataset (legacy)
client.CloudforceOne.ThreatEvents.TargetIndustries.ByDataset.List(ctx, datasetID, query) (*ThreatEventTargetIndustryByDatasetListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/targetIndustries

Cloudforce OneThreat EventsTarget IndustriesCatalog

List all target industries
client.CloudforceOne.ThreatEvents.TargetIndustries.Catalog.List(ctx, query) (*ThreatEventTargetIndustryCatalogListResponse, error)
GET/accounts/{account_id}/cloudforce-one/events/targetIndustries/catalog

Cloudforce OneThreat EventsInsights

Cloudforce OneThreat Signals

Threat Signals API for managing threat intelligence feeds, articles, indicators, and AI skills in Cloudforce One.

Prerequisites

  1. API token — requests must use an API token with Cloudforce One permissions; write operations (creating, editing, or deleting feeds, skills, and tags) require write access.
  2. Plan limits — access on the Free plan is limited; feed quotas and managed default skills apply.

Cloudforce OneThreat SignalsSearch

Search Threat Signals articles using AI Search
client.CloudforceOne.ThreatSignals.Search.Search(ctx, params) (*ThreatSignalSearchSearchResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/search

Cloudforce OneThreat SignalsCategories

List Threat Signals feed categories
client.CloudforceOne.ThreatSignals.Categories.List(ctx, query) (*ThreatSignalCategoryListResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/categories

Cloudforce OneThreat SignalsFeeds

List Threat Signals feeds
client.CloudforceOne.ThreatSignals.Feeds.List(ctx, params) (*V4PagePagination[ThreatSignalFeedListResponse], error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds
Create Threat Signals feed
client.CloudforceOne.ThreatSignals.Feeds.New(ctx, params) (*ThreatSignalFeedNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds
Update Threat Signals feed
client.CloudforceOne.ThreatSignals.Feeds.Edit(ctx, feedID, params) (*ThreatSignalFeedEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}
Delete Threat Signals feed
client.CloudforceOne.ThreatSignals.Feeds.Delete(ctx, feedID, body) (*ThreatSignalFeedDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}
Trigger Threat Signals feed poll
client.CloudforceOne.ThreatSignals.Feeds.Poll(ctx, params) (*ThreatSignalFeedPollResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/poll

Cloudforce OneThreat SignalsFeedsRaw

Get Threat Signals feed XML
client.CloudforceOne.ThreatSignals.Feeds.Raw.Get(ctx, feedID, params) (*string, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/raw

Cloudforce OneThreat SignalsFeedsSkills

Get Threat Signals feed skills
client.CloudforceOne.ThreatSignals.Feeds.Skills.Get(ctx, feedID, query) (*ThreatSignalFeedSkillGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/skills
Set Threat Signals feed skills
client.CloudforceOne.ThreatSignals.Feeds.Skills.Update(ctx, feedID, params) (*ThreatSignalFeedSkillUpdateResponse, error)
PUT/accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/skills

Cloudforce OneThreat SignalsArticles

List Threat Signals articles
client.CloudforceOne.ThreatSignals.Articles.List(ctx, params) (*ThreatSignalArticleListResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles
Bulk update Threat Signals article read status
client.CloudforceOne.ThreatSignals.Articles.BulkEdit(ctx, params) (*ThreatSignalArticleBulkEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles
Get Threat Signals article
client.CloudforceOne.ThreatSignals.Articles.Get(ctx, articleID, query) (*ThreatSignalArticleGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}
Update Threat Signals article read status
client.CloudforceOne.ThreatSignals.Articles.Edit(ctx, articleID, params) (*ThreatSignalArticleEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}

Cloudforce OneThreat SignalsArticlesContent

Get Threat Signals article content
client.CloudforceOne.ThreatSignals.Articles.Content.Get(ctx, articleID, params) (*string, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/content

Cloudforce OneThreat SignalsArticlesTags

Add tag to Threat Signals article
client.CloudforceOne.ThreatSignals.Articles.Tags.New(ctx, articleID, params) (*ThreatSignalArticleTagNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags
Remove tag from Threat Signals article
client.CloudforceOne.ThreatSignals.Articles.Tags.Delete(ctx, articleID, tagID, body) (*ThreatSignalArticleTagDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags/{tag_id}
Generate Threat Signals article AI tags
client.CloudforceOne.ThreatSignals.Articles.Tags.Generate(ctx, articleID, body) (*ThreatSignalArticleTagGenerateResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tag

Cloudforce OneThreat SignalsArticlesSkill Outputs

Get Threat Signals article skill output
client.CloudforceOne.ThreatSignals.Articles.SkillOutputs.Get(ctx, articleID, skillID, query) (*ThreatSignalArticleSkillOutputGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/output

Cloudforce OneThreat SignalsIndicators

List Threat Signals article indicators
client.CloudforceOne.ThreatSignals.Indicators.List(ctx, params) (*ThreatSignalIndicatorListResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/indicators

Cloudforce OneThreat SignalsSkills

List Threat Signals skills
client.CloudforceOne.ThreatSignals.Skills.List(ctx, params) (*V4PagePagination[ThreatSignalSkillListResponse], error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills
Create Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.New(ctx, params) (*ThreatSignalSkillNewResponse, error)
POST/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills
Get Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.Get(ctx, skillID, query) (*ThreatSignalSkillGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}
Update Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.Edit(ctx, skillID, params) (*ThreatSignalSkillEditResponse, error)
PATCH/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}
Delete Threat Signals skill
client.CloudforceOne.ThreatSignals.Skills.Delete(ctx, skillID, body) (*ThreatSignalSkillDeleteResponse, error)
DELETE/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}

Cloudforce OneThreat SignalsSkillsTag Categories

Get Threat Signals skill tag categories
client.CloudforceOne.ThreatSignals.Skills.TagCategories.Get(ctx, skillID, query) (*ThreatSignalSkillTagCategoryGetResponse, error)
GET/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories
Replace Threat Signals skill tag categories
client.CloudforceOne.ThreatSignals.Skills.TagCategories.Update(ctx, skillID, params) (*ThreatSignalSkillTagCategoryUpdateResponse, error)
PUT/accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories