API Reference

Cloudforce One

Copy Markdown

Open in Claude

Open in ChatGPT

Open in Cursor

---

Copy Markdown

View as Markdown

Threat Events

List events

client.CloudforceOne.ThreatEvents.List(ctx, params) (*[]ThreatEventListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events

Get an event (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Get(ctx, eventID, query) (*ThreatEventGetResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/{event_id}

Create an event

client.CloudforceOne.ThreatEvents.New(ctx, params) (*ThreatEventNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/create

Update an event

client.CloudforceOne.ThreatEvents.Edit(ctx, eventID, params) (*ThreatEventEditResponse, error)

PATCH/accounts/{account_id}/cloudforce-one/events/{event_id}

Create events in bulk

client.CloudforceOne.ThreatEvents.BulkNew(ctx, params) (*ThreatEventBulkNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/create/bulk

Create events with relationships in bulk (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.BulkNewRelationships(ctx, params) (*ThreatEventBulkNewRelationshipsResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/create/bulk/relationships

Threat EventsAggregate

Aggregate events

client.CloudforceOne.ThreatEvents.Aggregate.List(ctx, params) (*ThreatEventAggregateListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/aggregate

Threat EventsGraphql

Run a GraphQL aggregation over events

client.CloudforceOne.ThreatEvents.Graphql.New(ctx, body) (*ThreatEventGraphqlNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/graphql

Threat EventsGraph

Query graph neighborhood from R2 Data Catalog

client.CloudforceOne.ThreatEvents.Graph.List(ctx, params) (*ThreatEventGraphListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/graph

Threat EventsQueries

List saved event queries

client.CloudforceOne.ThreatEvents.Queries.List(ctx, query) (*[]ThreatEventQueryListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/queries

Create a saved event query

client.CloudforceOne.ThreatEvents.Queries.New(ctx, params) (*ThreatEventQueryNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/queries/create

Get a saved event query

client.CloudforceOne.ThreatEvents.Queries.Get(ctx, queryID, query) (*ThreatEventQueryGetResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/queries/{query_id}

Update a saved event query

client.CloudforceOne.ThreatEvents.Queries.Edit(ctx, queryID, params) (*ThreatEventQueryEditResponse, error)

PATCH/accounts/{account_id}/cloudforce-one/events/queries/{query_id}

Delete a saved event query

client.CloudforceOne.ThreatEvents.Queries.Delete(ctx, queryID, body) error

DELETE/accounts/{account_id}/cloudforce-one/events/queries/{query_id}

Threat EventsRelationships

List related events (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Relationships.List(ctx, eventID, params) (*[]ThreatEventRelationshipListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/{event_id}/relationships

Threat EventsIndicators

List indicators

client.CloudforceOne.ThreatEvents.Indicators.List(ctx, params) (*ThreatEventIndicatorListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/indicators

Threat EventsIndicatorsAggregate

Aggregate indicators by column(s)

client.CloudforceOne.ThreatEvents.Indicators.Aggregate.List(ctx, params) (*ThreatEventIndicatorAggregateListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/indicators/aggregate

Threat EventsIndicatorsTypes

List indicator types

client.CloudforceOne.ThreatEvents.Indicators.Types.List(ctx, params) (*ThreatEventIndicatorTypeListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/indicator-types

Threat EventsIndicatorsBy Dataset

List indicators in a dataset (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Indicators.ByDataset.List(ctx, datasetID, params) (*ThreatEventIndicatorByDatasetListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators

Get an indicator

client.CloudforceOne.ThreatEvents.Indicators.ByDataset.Get(ctx, datasetID, indicatorID, query) (*ThreatEventIndicatorByDatasetGetResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/{indicator_id}

Threat EventsIndicatorsBy DatasetTags

List tags on a dataset's indicators

client.CloudforceOne.ThreatEvents.Indicators.ByDataset.Tags.List(ctx, datasetID, query) (*[]ThreatEventIndicatorByDatasetTagListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/tags

Threat EventsAttackers

List attackers

client.CloudforceOne.ThreatEvents.Attackers.List(ctx, params) (*ThreatEventAttackerListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/attackers

Threat EventsCategories

List event categories used in datasets

client.CloudforceOne.ThreatEvents.Categories.List(ctx, params) (*[]ThreatEventCategoryListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/categories

Get an event category (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Categories.Get(ctx, categoryID, query) (*ThreatEventCategoryGetResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/categories/{category_id}

Create an event category

client.CloudforceOne.ThreatEvents.Categories.New(ctx, params) (*ThreatEventCategoryNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/categories/create

Update an event category (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Categories.Edit(ctx, categoryID, params) (*ThreatEventCategoryEditResponse, error)

PATCH/accounts/{account_id}/cloudforce-one/events/categories/{category_id}

Delete an event category (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Categories.Delete(ctx, categoryID, body) (*ThreatEventCategoryDeleteResponse, error)

DELETE/accounts/{account_id}/cloudforce-one/events/categories/{category_id}

Threat EventsCategoriesCatalog

List all event categories

client.CloudforceOne.ThreatEvents.Categories.Catalog.List(ctx, query) (*[]ThreatEventCategoryCatalogListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/categories/catalog

Threat EventsCountries

List countries

client.CloudforceOne.ThreatEvents.Countries.List(ctx, query) (*[]ThreatEventCountryListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/countries

Threat EventsCrons

Threat EventsDatasets

List datasets

client.CloudforceOne.ThreatEvents.Datasets.List(ctx, params) (*[]ThreatEventDatasetListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset

Get a dataset

client.CloudforceOne.ThreatEvents.Datasets.Get(ctx, datasetID, query) (*ThreatEventDatasetGetResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}

Create a dataset

client.CloudforceOne.ThreatEvents.Datasets.New(ctx, params) (*ThreatEventDatasetNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/dataset/create

Update a dataset

client.CloudforceOne.ThreatEvents.Datasets.Edit(ctx, datasetID, params) (*ThreatEventDatasetEditResponse, error)

PATCH/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}

Delete a dataset

client.CloudforceOne.ThreatEvents.Datasets.Delete(ctx, datasetID, body) (*ThreatEventDatasetDeleteResponse, error)

DELETE/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}

Get raw data for an event (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Datasets.Raw(ctx, datasetID, eventID, query) (*ThreatEventDatasetRawResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/raw/{dataset_id}/{event_id}

Threat EventsDatasetsHealth

Threat EventsDatasetsEvents

Get an event

client.CloudforceOne.ThreatEvents.Datasets.Events.Get(ctx, datasetID, eventID, query) (*ThreatEventDatasetEventGetResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/events/{event_id}

Threat EventsRaw

Get raw event data by raw ID (legacy)

client.CloudforceOne.ThreatEvents.Raw.Get(ctx, eventID, rawID, query) (*ThreatEventRawGetResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/{event_id}/raw/{raw_id}

Update raw event data by raw ID (legacy)

client.CloudforceOne.ThreatEvents.Raw.Edit(ctx, eventID, rawID, params) (*ThreatEventRawEditResponse, error)

PATCH/accounts/{account_id}/cloudforce-one/events/{event_id}/raw/{raw_id}

Threat EventsRelate

Remove event references (legacy)

client.CloudforceOne.ThreatEvents.Relate.Delete(ctx, eventID, body) (*ThreatEventRelateDeleteResponse, error)

DELETE/accounts/{account_id}/cloudforce-one/events/relate/{event_id}

Threat EventsTags

List tags

client.CloudforceOne.ThreatEvents.Tags.List(ctx, params) (*ThreatEventTagListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/tags

Create a tag

client.CloudforceOne.ThreatEvents.Tags.New(ctx, params) (*ThreatEventTagNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/tags/create

Update a tag

client.CloudforceOne.ThreatEvents.Tags.Edit(ctx, tagUUID, params) (*ThreatEventTagEditResponse, error)

PATCH/accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}

Delete a tag

client.CloudforceOne.ThreatEvents.Tags.Delete(ctx, tagUUID, body) (*ThreatEventTagDeleteResponse, error)

DELETE/accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}

Threat EventsTagsCategories

List tag categories

client.CloudforceOne.ThreatEvents.Tags.Categories.List(ctx, params) (*ThreatEventTagCategoryListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/tags/categories

Create a tag category

client.CloudforceOne.ThreatEvents.Tags.Categories.New(ctx, params) (*ThreatEventTagCategoryNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/tags/categories/create

Update a tag category (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Tags.Categories.Edit(ctx, categoryUUID, params) (*ThreatEventTagCategoryEditResponse, error)

PATCH/accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid}

Delete a tag category (legacy)

Deprecated

client.CloudforceOne.ThreatEvents.Tags.Categories.Delete(ctx, categoryUUID, body) (*ThreatEventTagCategoryDeleteResponse, error)

DELETE/accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid}

Threat EventsTagsIndicators

List a tag's indicators

client.CloudforceOne.ThreatEvents.Tags.Indicators.List(ctx, tagUUID, params) (*ThreatEventTagIndicatorListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}/indicators

Threat EventsTagsIndicatorsBy Dataset

List indicators related to a tag within a dataset (deprecated)

Deprecated

client.CloudforceOne.ThreatEvents.Tags.Indicators.ByDataset.List(ctx, datasetID, tagUUID, params) (*ThreatEventTagIndicatorByDatasetListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/tags/{tag_uuid}/indicators

Threat EventsEvent Tags

Add tags to an event (legacy)

client.CloudforceOne.ThreatEvents.EventTags.New(ctx, eventID, params) (*ThreatEventEventTagNewResponse, error)

POST/accounts/{account_id}/cloudforce-one/events/event_tag/{event_id}/create

Remove tags from an event (legacy)

client.CloudforceOne.ThreatEvents.EventTags.Delete(ctx, eventID, body) (*ThreatEventEventTagDeleteResponse, error)

DELETE/accounts/{account_id}/cloudforce-one/events/event_tag/{event_id}

Threat EventsTarget Industries

List target industries used in datasets

client.CloudforceOne.ThreatEvents.TargetIndustries.List(ctx, params) (*ThreatEventTargetIndustryListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/targetIndustries

Threat EventsTarget IndustriesBy Dataset

List target industries in a dataset (legacy)

client.CloudforceOne.ThreatEvents.TargetIndustries.ByDataset.List(ctx, datasetID, query) (*ThreatEventTargetIndustryByDatasetListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/targetIndustries

Threat EventsTarget IndustriesCatalog

List all target industries

client.CloudforceOne.ThreatEvents.TargetIndustries.Catalog.List(ctx, query) (*ThreatEventTargetIndustryCatalogListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/targetIndustries/catalog

Threat EventsInsights