Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here

Body

application/json

Request body for generating a detection system prompt

prompt
string
required

Natural language description of the detection objective

Minimum string length: 1
siemType
enum<string>
required

The detection tool platform (SIEM or endpoint tools like SentinelOne)

Available options:
splunk,
sumologic,
elastic,
databricks,
datadog,
scanner,
runreveal,
sentinelone,
gadmin
category
enum<string>
required

The detection category

Available options:
baseline_anomaly,
first_occurrence,
sequence_pattern,
privilege_escalation,
custom

Response

Successful response

Generated system prompt for manual query mode

systemPrompt
string
required

The customized system prompt for the detection agent