Tencent Cloud

Download PDF

DescribeBashEventsNew

Last updated: 2024-12-06 15:41:13

Download PDF

1. API Description

Domain name for API request: cwp.intl.tencentcloudapi.com.

This API is used to obtain the list of high-risk commands (new).

A maximum of 20 requests can be initiated per second for this API.

We recommend you to use API Explorer

Try it

API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

2. Input Parameters

The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

Parameter Name	Required	Type	Description
Action	Yes	String	Common Params. The value used for this API: DescribeBashEventsNew.
Version	Yes	String	Common Params. The value used for this API: 2018-02-28.
Region	No	String	Common Params. This parameter is not required.
Limit	No	Integer	Quantity of returns. It is 10 by default, and the maximum value is 100.
Filters.N	No	Array of Filter	Filter criteria HostName - String - required: no - host name Hostip - String - required: no - host's private IP address HostIp - String - required: no - host's private IP address RuleCategory - Int - required: no - policy type (all types or a single type): 0: system; 1: user RuleName - String - required: no - policy name RuleLevel - Int - required: no - threat Level (multiple levels supported) Status - Int - required: no - processing status (multiple statuses supported): 0: pending; 1: processed; 2: added to allowlist; 3: ignored; 4: deleted; 5: blocked DetectBy - Int - required: no - data source (multiple sources supported): 0: bash logs; 1: real-time monitoring StartTime - String - required: no - start time EndTime - String - required: no - end time
Offset	No	Integer	Offset. Default value: 0.
Order	No	String	Sorting method: sort by number of requests. asc: ascending; desc: descending.
By	No	String	Sorting field. CreateTime: occurrence time; ModifyTime: processing time.

3. Output Parameters

Parameter Name	Type	Description
TotalCount	Integer	Total number
List	Array of BashEventNew	High-risk command event list
RequestId	String	The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem.

4. Example

Example1 High-Risk Command Event List

Input Example

POST / HTTP/1.1
Host: cwp.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeBashEventsNew
<Common request parameters>

{
    "Limit": "1",
    "Offset": "0"
}

Output Example

{
    "Response": {
        "List": [
            {
                "Uuid": "02db9a21-78fe-4a4c-b96f-a11bf819a962",
                "Id": 3148114,
                "Quuid": "02db9a21-78fe-4a4c-b96f-a11bf819a962",
                "HostIp": "192.168.111.28",
                "User": "root",
                "Platform": 4,
                "BashCmd": "./r3hook_tool moc -var www.test123.com",
                "RuleId": 0,
                "RuleName": "sysrule_custom_procmon_1",
                "RuleLevel": 1,
                "Status": 0,
                "CreateTime": "2022-09-01 17:28:39",
                "MachineName": "v_llzlu malicious request",
                "DetectBy": 0,
                "Pid": "0",
                "Exe": "",
                "ModifyTime": "0001-01-01 00:00:00",
                "RegexBashCmd": "\\./r3hook_tool moc -var www\\.test123\\.com",
                "MachineType": 0,
                "RuleCategory": 0
            }
        ],
        "RequestId": "c787b780-0a35-4fa5-aca3-db339b9a20e8",
        "TotalCount": 51315
    }
}

5. Developer Resources

SDK

TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

Command Line Interface

Tencent Cloud CLI 3.0

6. Error Code

The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.

Error Code	Description
FailedOperation	Operation failed.
InternalError	Internal error
InvalidParameter	Incorrect parameter.
InvalidParameter.IllegalRequest	Invalid request.
InvalidParameter.InvalidFormat	Incorrect parameter format.
InvalidParameter.MissingParameter	Missing parameter.
InvalidParameter.ParsingError	Incorrect parameter parsing.
InvalidParameterValue	Invalid parameter value.
MissingParameter	Missing parameter error.
ResourceNotFound	The resource does not exist.

tencent cloud

Recent Pages

DescribeBashEventsNew

1. API Description

2. Input Parameters

3. Output Parameters

4. Example

Example1 High-Risk Command Event List

Input Example

Output Example

5. Developer Resources

SDK

Command Line Interface

6. Error Code

Was this page helpful?

Was this page helpful?

tencent cloud

Sign Up

Log in

Recent Pages

DescribeBashEventsNew

1. API Description

2. Input Parameters

3. Output Parameters

4. Example

Example1 High-Risk Command Event List

Input Example

Output Example

5. Developer Resources

SDK

Command Line Interface

6. Error Code

Was this page helpful?

Was this page helpful?