Method: entities.queryEntityRiskScoreModifications

Full name: projects.locations.instances.entities.queryEntityRiskScoreModifications

Query modifications to base entity risk score for an entity.

HTTP request

GET https://chronicle.googleapis.com/v1alpha/{name}:queryEntityRiskScoreModifications

Path parameters

Parameters
name

string

Required. The entity id to the entity to query entity risk score modifications on. In the QueryEntityRiskScoreModifications API, entity id is an encoded string of the Most Reliable Indicator proto (including MRI value, type and namespace), which would finally be a unified representation of Entity resource. Format: projects/{project}/locations/{location}/instances/{instance}/entities/{entity}

Query parameters

Parameters
modificationTimeRange

object (Interval)

Required. Time range to filter the entity risk score modifications.
pageSize

integer

Optional. The maximum number of entity risk score modifications to return. The service may return fewer than this value.
pageToken

string

Optional. Page token retrieved from the previous QueryEntityRiskScoreModifications call.

Request body

The request body must be empty.

Response body

Response message for QueryEntityRiskScoreModifications method.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "entity_risk_score_modifications": [
    {
      object (EntityRiskScoreModification)
    }
  ],
  "next_page_token": string
}
Fields
entity_risk_score_modifications[]

object (EntityRiskScoreModification)

List of all entity risk score modifications for an entity. Ordered by EntityRiskScoreModification.modification_time DESC.
next_page_token

string

A token that can be sent as page_token to retrieve the next page. If this field is omitted, there are no subsequent pages.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

  • chronicle.entities.queryEntityRiskScoreModifications

For more information, see the IAM documentation.