REST Resource: organizations.locations.firewallEndpoints.wildfireVerdictChangeRequests

Resource: WildfireVerdictChangeRequest

Message for a WildfireVerdictChangeRequest.

JSON representation 
{
  "name": string,
  "wildfireVerdictChangeRequestId": string,
  "sha256": string,
  "newVerdict": enum (WildfireSampleVerdict),
  "comment": string,
  "createTime": string,
  "oldVerdict": enum (WildfireSampleVerdict),
  "state": enum (VerdictChangeRequestState),
  "updateTime": string,
  "resolutionTime": string,
  "finalVerdict": enum (WildfireSampleVerdict),
  "fileName": string,
  "fileType": string,
  "sourceRegion": string
}
Fields
name

string

Output only. Identifier. The relative name of the WildfireVerdictChangeRequest. Output only. This is a unique identifier generated by the third party API. Format: organizations|projects/{project_or_organization}/locations/{location}/firewallEndpoints/{firewallEndpoint}/wildfireVerdictChangeRequests/{wildfireVerdictChangeRequestId} Where {wildfireVerdictChangeRequestId} is the ID in the format: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
wildfireVerdictChangeRequestId

string

Output only. The ID of the WildfireVerdictChangeRequest. This is a unique identifier generated by the third party API. Format: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$
sha256

string

Required. The SHA256 hash of the Malware Sample to change the verdict of.
newVerdict

enum (WildfireSampleVerdict)

Required. The suggested verdict to apply to the Malware Sample.
comment

string

Required. The justification for the verdict change request. Max length 2048 characters.
createTime

string (Timestamp format)

Output only. The timestamp when the WildfireVerdictChangeRequest was created.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
oldVerdict

enum (WildfireSampleVerdict)

Output only. The original verdict of the Malware Sample.
state

enum (VerdictChangeRequestState)

Output only. The review state of the WildfireVerdictChangeRequest.
updateTime

string (Timestamp format)

Output only. The timestamp when the WildfireVerdictChangeRequest was last updated.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
resolutionTime

string (Timestamp format)

Output only. The timestamp when the WildfireVerdictChangeRequest was resolved.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
finalVerdict

enum (WildfireSampleVerdict)

Output only. The final verdict of the Malware Sample.
fileName

string

Output only. The file name of the Malware Sample.
fileType

string

Output only. The file type of the Malware Sample.
sourceRegion

string

Output only. The region of the file associated with the Malware Sample.

WildfireSampleVerdict

Malware Sample classifications.

Enums
WILDFIRE_SAMPLE_VERDICT_UNKNOWN Default value. Malware is not yet classified.
BENIGN Sample is safe and does not exhibit malicious behavior.
MALWARE Sample is malware and poses a security threat.
GRAYWARE Sample does not pose a direct security threat, but might display otherwise obtrusive behavior.
PHISHING Link directs users to a phishing site and poses a security threat.

VerdictChangeRequestState

State of a Malware Sample Verdict Change Request.

Enums
VERDICT_CHANGE_REQUEST_STATE_UNSPECIFIED Default value. Request does not have a state. This value is unused.
OPEN Request has been created and review has not started.
CLOSED Malware Sample has been reviewed and the final verdict has been updated.
PENDING Malware Sample is currently being reviewed.

Methods

create

 Create WildfireVerdictChangeRequest in a given Firewall Endpoint in an organization and location.

get

 Get WildfireVerdictChangeRequest in a given Firewall Endpoint in an organization and location.

list

 Lists WildfireVerdictChangeRequests in a given Firewall Endpoint in an organization and location.