REST Resource: organizations.locations.firewallEndpoints.wildfireVerdictChangeRequests

Resource: WildfireVerdictChangeRequest

Message for an Advanced malware sandbox verdict change request (WildfireVerdictChangeRequest).

JSON representation 
{
  "name": string,
  "wildfireVerdictChangeRequestId": string,
  "sha256": string,
  "newVerdict": enum (WildfireSampleVerdict),
  "comment": string,
  "createTime": string,
  "oldVerdict": enum (WildfireSampleVerdict),
  "state": enum (VerdictChangeRequestState),
  "updateTime": string,
  "resolutionTime": string,
  "finalVerdict": enum (WildfireSampleVerdict),
  "fileName": string,
  "fileType": string,
  "sourceRegion": string
}
Fields
name

string

Output only. Identifier. The relative name of the WildfireVerdictChangeRequest. This is a unique identifier generated by the third-party API.

Format: organizations|projects/{project_or_organization}/locations/{location}/firewallEndpoints/{firewallEndpoint}/wildfireVerdictChangeRequests/{wildfireVerdictChangeRequestId}

Where {wildfireVerdictChangeRequestId} is an ID in the format ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$.
wildfireVerdictChangeRequestId

string

Output only. The ID of the WildfireVerdictChangeRequest. This is a unique identifier generated by the third-party API. Format: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$.
sha256

string

Required. The SHA256 hash of the malware sample that requires a verdict change.
newVerdict

enum (WildfireSampleVerdict)

Required. The suggested verdict to apply to the malware sample.
comment

string

Required. The justification for the verdict change request. The maximum length is 2048 characters.
createTime

string (Timestamp format)

Output only. The timestamp when the WildfireVerdictChangeRequest was created.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
oldVerdict

enum (WildfireSampleVerdict)

Output only. The original verdict of the malware sample.
state

enum (VerdictChangeRequestState)

Output only. The review state of the WildfireVerdictChangeRequest.
updateTime

string (Timestamp format)

Output only. The timestamp when the WildfireVerdictChangeRequest was last updated.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
resolutionTime

string (Timestamp format)

Output only. The timestamp when the WildfireVerdictChangeRequest was resolved.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
finalVerdict

enum (WildfireSampleVerdict)

Output only. The final verdict of the malware sample.
fileName

string

Output only. The file name of the malware sample.
fileType

string

Output only. The file type of the malware sample.
sourceRegion

string

Output only. The region of the file associated with the malware sample.

WildfireSampleVerdict

Malware sample classifications.

Enums
WILDFIRE_SAMPLE_VERDICT_UNKNOWN Default value. The malware sample is not yet classified.
BENIGN Sample is safe and does not exhibit malicious behavior.
MALWARE Sample is malware and poses a security threat.
GRAYWARE Sample does not pose a direct security threat, but might display otherwise obtrusive behavior.
PHISHING Link directs users to a phishing site and poses a security threat.

VerdictChangeRequestState

State of a malware sample verdict change request.

Enums
VERDICT_CHANGE_REQUEST_STATE_UNSPECIFIED Default value. The request does not have a state. This value is unused.
OPEN The request has been created and review has not started.
CLOSED The malware sample has been reviewed and the final verdict has been updated.
PENDING The malware sample is being reviewed.

Methods

create

 Creates an Advanced malware sandbox verdict change request in a given firewall endpoint in an organization and location.

get

 Gets an Advanced malware sandbox verdict change request in a given firewall endpoint in an organization and location.

list

 Lists the Advanced malware sandbox (WildFire) verdict change requests in a given firewall endpoint in an organization and location.