Skip to main content
PUT
/
api
/
detection-authoring
/
drafts
/
{chatId}
cURL
curl -X PUT "https://app.cotool.ai/api/detection-authoring/drafts/:chatId" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"string","description":"string","query":"string","mitreTechniqueIds":["string"],"mitreTechniqueNames":["string"],"dataSourcesRequired":["string"],"detectionIntent":{"methodLabel":"string","rationale":"string","confidence":"high","keyKnobs":null},"platformConfig":{"version":1,"platform":"datadog","queries":[{"name":"string","query":"string","aggregation":"count","dataSource":null,"groupByFields":["string"],"distinctFields":["string"]}],"cases":[{"status":"info","condition":"string","name":"string"}],"options":{"detectionMethod":"threshold","evaluationWindow":0,"keepAlive":0,"maxSignalDuration":0,"decreaseCriticalityBasedOnEnv":true},"isEnabled":true}}'
{
  "chatId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "organizationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "platform": "<string>",
  "name": "<string>",
  "description": "<string>",
  "query": "<string>",
  "mitreTechniqueIds": [
    "<string>"
  ],
  "mitreTechniqueNames": [
    "<string>"
  ],
  "dataSourcesRequired": [
    "<string>"
  ],
  "createdAt": "<string>",
  "updatedAt": "<string>",
  "proposalId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "reasoning": "<string>",
  "detectionIntent": {
    "methodLabel": "<string>",
    "rationale": "<string>",
    "confidence": "high",
    "keyKnobs": {}
  },
  "platformConfig": {
    "version": 123,
    "platform": "<string>",
    "queries": [
      {
        "name": "<string>",
        "query": "<string>",
        "aggregation": "count",
        "dataSource": "logs",
        "groupByFields": [
          "<string>"
        ],
        "distinctFields": [
          "<string>"
        ]
      }
    ],
    "cases": [
      {
        "status": "info",
        "condition": "<string>",
        "name": "<string>"
      }
    ],
    "options": {
      "detectionMethod": "threshold",
      "evaluationWindow": 123,
      "keepAlive": 123,
      "maxSignalDuration": 123,
      "decreaseCriticalityBasedOnEnv": true
    },
    "isEnabled": true
  },
  "prUrl": "<string>",
  "deployedAt": "<string>",
  "sourceStatus": "proposed",
  "sourcePrUrl": "<string>",
  "sourcePublishedAt": "<string>",
  "isUnmodifiedFromSource": true
}

Documentation Index

Fetch the complete documentation index at: https://docs.cotool.ai/llms.txt

Use this file to discover all available pages before exploring further.

Authorizations

​
Authorization
string
header
required

API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here

Path Parameters

​
chatId
string<uuid>
required

Body

application/json
​
name
string
​
description
string
​
query
string
​
mitreTechniqueIds
string[]
​
mitreTechniqueNames
string[]
​
dataSourcesRequired
string[]
​
detectionIntent
object
​
platformConfig
object

Response

200 - application/json

Successful response

​
chatId
string<uuid>
required
​
organizationId
string<uuid>
required
​
platform
string
required
​
name
string
required
​
description
string
required
​
query
string
required
​
mitreTechniqueIds
string[]
required
​
mitreTechniqueNames
string[]
required
​
dataSourcesRequired
string[]
required
​
createdAt
string
required
​
updatedAt
string
required
​
proposalId
string<uuid>
​
reasoning
string
​
detectionIntent
object
​
platformConfig
object
​
prUrl
string<uri>
​
deployedAt
string
​
sourceStatus
enum<string>
Available options:
proposed,
validated,
validation_failed,
published,
pr_created,
merged,
rejected,
dismissed
​
sourcePrUrl
string<uri>
​
sourcePublishedAt
string
​
isUnmodifiedFromSource
boolean