Tencent Container Security Service
- Product Introduction
- Operation Guide
- Vulnerability Detection
- Image Risk Management
- Cluster Risk Management
- Baseline Management
- Runtime Security
- Advanced Defense
- Abnormal Process
- File Tampering
- High-Risk Syscall
- Policy Management
- Container Network Policy
- Log Analysis
- Hybrid Cloud Installation Guide
- Troubleshooting
- API Documentation
- Making API Requests
- Network Security APIs
- Cluster Security APIs
- Security Compliance APIs
- Runtime security - High-risk syscalls
- Runtime Security - Reverse Shell APIs
- Runtime Security APIs
- Alert Settings APIs
- Advanced prevention - K8s API abnormal requests
- Asset Management APIs
- Security Operations - Log Analysis APIs
- Runtime Security - Trojan Call APIs
- Runtime Security - Container Escape APIs
- Image Security APIs
- Billing APIs
DocumentationTencent Container Security ServiceAPI DocumentationRuntime Security APIsDescribeRiskSyscallDetail
DescribeRiskSyscallDetail
Last updated: 2024-12-06 15:47:08
1. API Description
Domain name for API request: tcss.intl.tencentcloudapi.com.
This API is used to query the details of a high-risk syscall event.
A maximum of 20 requests can be initiated per second for this API.
We recommend you to use API Explorer
Try it
API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.
2. Input Parameters
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: DescribeRiskSyscallDetail. |
| Version | Yes | String | Common Params. The value used for this API: 2020-11-01. |
| Region | No | String | Common Params. This parameter is not required. |
| EventId | Yes | String | Unique event ID |
3. Output Parameters
| Parameter Name | Type | Description |
|---|---|---|
| EventBaseInfo | RunTimeEventBaseInfo | Basic information of the event |
| ProcessInfo | ProcessDetailInfo | Process information |
| ParentProcessInfo | ProcessDetailBaseInfo | Parent process information |
| EventDetail | RiskSyscallEventDescription | Event description |
| AncestorProcessInfo | ProcessBaseInfo | Ancestor process information Note: This field may return null, indicating that no valid values can be obtained. |
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
4. Example
Example1 Querying details of a high-risk syscall event
This example shows you how to query details of a high-risk syscall event.
Input Example
POST / HTTP/1.1
Host: tcss.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeRiskSyscallDetail
<Common request parameters>
{
"EventId": "abc"
}
Output Example
{
"Response": {
"EventBaseInfo": {
"EventId": "abc",
"FoundTime": "2020-09-22 00:00:00",
"ContainerId": "abc",
"ContainerName": "abc",
"ImageId": "abc",
"ImageName": "abc",
"NodeName": "abc",
"Status": "abc",
"EventName": "abc",
"EventType": "abc",
"EventCount": 0,
"LatestFoundTime": "abc",
"HostIP": "abc",
"ClientIP": "abc",
"ContainerNetStatus": "abc",
"ContainerNetSubStatus": "abc",
"ContainerIsolateOperationSrc": "abc",
"NodeID": "abc",
"NodeType": "abc",
"NodeSubNetID": "abc",
"NodeSubNetName": "abc",
"NodeSubNetCIDR": "abc",
"PodName": "abc",
"PodIP": "abc",
"PodStatus": "abc",
"ClusterID": "abc"
},
"ProcessInfo": {
"ProcessName": "abc",
"ProcessAuthority": "abc",
"ProcessId": 1,
"ProcessStartUser": "abc",
"ProcessUserGroup": "abc",
"ProcessPath": "abc",
"ProcessTree": "abc",
"ProcessMd5": "abc",
"ProcessParam": "abc"
},
"ParentProcessInfo": {
"ProcessName": "abc",
"ProcessId": 1,
"ProcessStartUser": "abc",
"ProcessUserGroup": "abc",
"ProcessPath": "abc",
"ProcessParam": "abc"
},
"EventDetail": {
"Description": "abc",
"Solution": "abc",
"Remark": "abc",
"SyscallName": "abc",
"OperationTime": "abc"
},
"AncestorProcessInfo": {
"ProcessStartUser": "abc",
"ProcessUserGroup": "abc",
"ProcessPath": "abc",
"ProcessParam": "abc"
},
"RequestId": "abc"
}
}
5. Developer Resources
SDK
TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
- Tencent Cloud SDK 3.0 for Python
- Tencent Cloud SDK 3.0 for Java
- Tencent Cloud SDK 3.0 for PHP
- Tencent Cloud SDK 3.0 for Go
- Tencent Cloud SDK 3.0 for Node.js
- Tencent Cloud SDK 3.0 for .NET
- Tencent Cloud SDK 3.0 for C++
Command Line Interface
6. Error Code
The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.
| Error Code | Description |
|---|---|
| AuthFailure | A CAM signature/authentication error occurred. |
| FailedOperation.DataValueNotCorrect | The response data value is incorrect. |
| InternalError | An internal error occurred. |
| InvalidParameter | The parameter is incorrect. |
| InvalidParameter.InvalidFormat | The parameter format is incorrect. |
| InvalidParameter.MissingParameter | The required parameter is missing. |
| InvalidParameterValue | The parameter value is incorrect. |
| InvalidParameterValue.DataNotFound | The current data was not found. |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No