cURL
curl -X POST "https://app.cotool.ai/api/detection-rules/proposals/:id/dismiss" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"reason":"string"}'import requests
url = "https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss"
payload = { "reason": "<string>" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({reason: '<string>'})
};
fetch('https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));HttpResponse<String> response = Unirest.post("https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"reason\": \"<string>\"\n}")
.asString();package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss"
payload := strings.NewReader("{\n \"reason\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"proposal": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"organizationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"name": "<string>",
"description": "<string>",
"query": "<string>",
"siemPlatform": "<string>",
"reasoning": "<string>",
"mitreTechniqueIds": [
"<string>"
],
"mitreTechniqueNames": [
"<string>"
],
"mitreTacticIds": [
"<string>"
],
"dataSourcesRequired": [
"<string>"
],
"suggestedTuning": {
"exclusions": [
"<string>"
],
"thresholds": [
"<string>"
],
"expectedVolume": "<string>"
},
"validationResult": {
"valid": true,
"details": {
"syntaxOk": true,
"executionOk": true,
"resultCount": 123,
"executionTimeMs": 123
},
"error": "<string>"
},
"volumeCheckResult": {
"checkedAt": "2023-11-07T05:31:56Z",
"rowCount": 123,
"executionTimeMs": 123,
"timeRangeHours": 123,
"bytesScanned": 123,
"sampleResults": [
{}
],
"querySnapshot": "<string>",
"bestEstimate": {
"count": 1,
"timeRangeHours": 2,
"source": "<string>"
}
},
"prUrl": "<string>",
"prMergedAt": "2023-11-07T05:31:56Z",
"publishedAt": "2023-11-07T05:31:56Z",
"publishedRuleId": "<string>",
"jobRunId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"dismissedReason": "<string>",
"dismissedBy": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"dismissedAt": "2023-11-07T05:31:56Z",
"publishingStartedAt": "2023-11-07T05:31:56Z",
"createdAt": "2023-11-07T05:31:56Z",
"updatedAt": "2023-11-07T05:31:56Z",
"grade": 10,
"gradeReason": "<string>",
"testResultsSummary": "<string>",
"detectionIntent": {
"methodLabel": "<string>",
"rationale": "<string>",
"keyKnobs": {}
},
"platformConfig": {
"version": 123,
"platform": "<string>",
"queries": [
{
"name": "<string>",
"query": "<string>",
"dataSource": "logs",
"groupByFields": [
"<string>"
],
"distinctFields": [
"<string>"
]
}
],
"cases": [
{
"condition": "<string>",
"name": "<string>"
}
],
"options": {
"evaluationWindow": 123,
"keepAlive": 123,
"maxSignalDuration": 123,
"decreaseCriticalityBasedOnEnv": true
},
"isEnabled": true
}
}
}{
"error": "<string>",
"issues": [
{}
]
}{
"error": "<string>"
}{
"error": "<string>",
"missingPerms": [
"<string>"
]
}{
"error": "<string>"
}Detection Rules
Dismiss a detection rule proposal
Mark a proposal as dismissed so it won’t be shown again.
POST
/
api
/
detection-rules
/
proposals
/
{id}
/
dismiss
cURL
curl -X POST "https://app.cotool.ai/api/detection-rules/proposals/:id/dismiss" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"reason":"string"}'import requests
url = "https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss"
payload = { "reason": "<string>" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({reason: '<string>'})
};
fetch('https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));HttpResponse<String> response = Unirest.post("https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"reason\": \"<string>\"\n}")
.asString();package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://app.cotool.ai/api/detection-rules/proposals/{id}/dismiss"
payload := strings.NewReader("{\n \"reason\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"proposal": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"organizationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"name": "<string>",
"description": "<string>",
"query": "<string>",
"siemPlatform": "<string>",
"reasoning": "<string>",
"mitreTechniqueIds": [
"<string>"
],
"mitreTechniqueNames": [
"<string>"
],
"mitreTacticIds": [
"<string>"
],
"dataSourcesRequired": [
"<string>"
],
"suggestedTuning": {
"exclusions": [
"<string>"
],
"thresholds": [
"<string>"
],
"expectedVolume": "<string>"
},
"validationResult": {
"valid": true,
"details": {
"syntaxOk": true,
"executionOk": true,
"resultCount": 123,
"executionTimeMs": 123
},
"error": "<string>"
},
"volumeCheckResult": {
"checkedAt": "2023-11-07T05:31:56Z",
"rowCount": 123,
"executionTimeMs": 123,
"timeRangeHours": 123,
"bytesScanned": 123,
"sampleResults": [
{}
],
"querySnapshot": "<string>",
"bestEstimate": {
"count": 1,
"timeRangeHours": 2,
"source": "<string>"
}
},
"prUrl": "<string>",
"prMergedAt": "2023-11-07T05:31:56Z",
"publishedAt": "2023-11-07T05:31:56Z",
"publishedRuleId": "<string>",
"jobRunId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"dismissedReason": "<string>",
"dismissedBy": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"dismissedAt": "2023-11-07T05:31:56Z",
"publishingStartedAt": "2023-11-07T05:31:56Z",
"createdAt": "2023-11-07T05:31:56Z",
"updatedAt": "2023-11-07T05:31:56Z",
"grade": 10,
"gradeReason": "<string>",
"testResultsSummary": "<string>",
"detectionIntent": {
"methodLabel": "<string>",
"rationale": "<string>",
"keyKnobs": {}
},
"platformConfig": {
"version": 123,
"platform": "<string>",
"queries": [
{
"name": "<string>",
"query": "<string>",
"dataSource": "logs",
"groupByFields": [
"<string>"
],
"distinctFields": [
"<string>"
]
}
],
"cases": [
{
"condition": "<string>",
"name": "<string>"
}
],
"options": {
"evaluationWindow": 123,
"keepAlive": 123,
"maxSignalDuration": 123,
"decreaseCriticalityBasedOnEnv": true
},
"isEnabled": true
}
}
}{
"error": "<string>",
"issues": [
{}
]
}{
"error": "<string>"
}{
"error": "<string>",
"missingPerms": [
"<string>"
]
}{
"error": "<string>"
}Authorizations
API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here
Path Parameters
Body
application/json
Reason for dismissing the proposal
Response
Successful response
Show child attributes
Show child attributes
Was this page helpful?
⌘I