{ "content": [ { "appendConditionMessages": true, "clearConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "clearExpression": "string", "clearMessage": "string", "description": "string", "flow": { "direction": 10, "filterId": 7, "id": 7, "viewId": 2 }, "folderId": 2, "groupId": 6, "groupIdList": [ 7, 8, 4, 3, 7, 9 ], "id": 1, "isDeviceGroup": true, "isMemberOfAny": true, "lastUpdated": 5, "mailOnce": true, "mailPeriod": 9, "mailTo": "string", "name": "string", "objectSubTypeId": 9, "objectTypeId": 7, "pluginId": 6, "severity": 3, "triggerConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "triggerExpression": "string", "triggerMessage": "string", "type": "flow", "useCustomTraps": false, "useDefaultTraps": true, "useDeviceTraps": false, "userEnabled": 1 }, { "appendConditionMessages": false, "clearConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "clearExpression": "string", "clearMessage": "string", "description": "string", "flow": { "direction": 4, "filterId": 6, "id": 3, "viewId": 8 }, "folderId": 8, "groupId": 1, "groupIdList": [ 3, 9, 6, 7, 6, 4 ], "id": 5, "isDeviceGroup": false, "isMemberOfAny": false, "lastUpdated": 9, "mailOnce": true, "mailPeriod": 9, "mailTo": "string", "name": "string", "objectSubTypeId": 7, "objectTypeId": 10, "pluginId": 9, "severity": 7, "triggerConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "triggerExpression": "string", "triggerMessage": "string", "type": "other", "useCustomTraps": true, "useDefaultTraps": true, "useDeviceTraps": false, "userEnabled": 7 }, { "appendConditionMessages": true, "clearConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "clearExpression": "string", "clearMessage": "string", "description": "string", "flow": { "direction": 8, "filterId": 6, "id": 4, "viewId": 2 }, "folderId": 4, "groupId": 2, "groupIdList": [ 3, 1, 5 ], "id": 6, "isDeviceGroup": false, "isMemberOfAny": false, "lastUpdated": 10, "mailOnce": false, "mailPeriod": 7, "mailTo": "string", "name": "string", "objectSubTypeId": 5, "objectTypeId": 1, "pluginId": 4, "severity": 10, "triggerConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "triggerExpression": "string", "triggerMessage": "string", "type": "other", "useCustomTraps": true, "useDefaultTraps": true, "useDeviceTraps": true, "userEnabled": 6 }, { "appendConditionMessages": true, "clearConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "clearExpression": "string", "clearMessage": "string", "description": "string", "flow": { "direction": 5, "filterId": 4, "id": 3, "viewId": 6 }, "folderId": 4, "groupId": 4, "groupIdList": [ 4, 4, 2, 8, 10, 1, 1, 7, 4 ], "id": 4, "isDeviceGroup": true, "isMemberOfAny": true, "lastUpdated": 5, "mailOnce": false, "mailPeriod": 4, "mailTo": "string", "name": "string", "objectSubTypeId": 7, "objectTypeId": 7, "pluginId": 1, "severity": 5, "triggerConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "triggerExpression": "string", "triggerMessage": "string", "type": "flow", "useCustomTraps": true, "useDefaultTraps": true, "useDeviceTraps": true, "userEnabled": 5 }, { "appendConditionMessages": false, "clearConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "clearExpression": "string", "clearMessage": "string", "description": "string", "flow": { "direction": 4, "filterId": 1, "id": 9, "viewId": 2 }, "folderId": 9, "groupId": 1, "groupIdList": [ 10, 7, 4, 2, 4 ], "id": 1, "isDeviceGroup": true, "isMemberOfAny": false, "lastUpdated": 6, "mailOnce": false, "mailPeriod": 3, "mailTo": "string", "name": "string", "objectSubTypeId": 10, "objectTypeId": 1, "pluginId": 10, "severity": 9, "triggerConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "triggerExpression": "string", "triggerMessage": "string", "type": "flow", "useCustomTraps": false, "useDefaultTraps": false, "useDeviceTraps": false, "userEnabled": 2 }, { "appendConditionMessages": false, "clearConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "clearExpression": "string", "clearMessage": "string", "description": "string", "flow": { "direction": 8, "filterId": 4, "id": 10, "viewId": 3 }, "folderId": 3, "groupId": 7, "groupIdList": [ 10, 1, 8, 3, 2, 9, 8, 5 ], "id": 2, "isDeviceGroup": false, "isMemberOfAny": true, "lastUpdated": 9, "mailOnce": false, "mailPeriod": 4, "mailTo": "string", "name": "string", "objectSubTypeId": 6, "objectTypeId": 1, "pluginId": 10, "severity": 2, "triggerConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "triggerExpression": "string", "triggerMessage": "string", "type": "other", "useCustomTraps": true, "useDefaultTraps": false, "useDeviceTraps": false, "userEnabled": 7 }, { "appendConditionMessages": true, "clearConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "clearExpression": "string", "clearMessage": "string", "description": "string", "flow": { "direction": 2, "filterId": 4, "id": 3, "viewId": 10 }, "folderId": 1, "groupId": 6, "groupIdList": [ 1, 8, 3, 1, 2, 10 ], "id": 9, "isDeviceGroup": false, "isMemberOfAny": false, "lastUpdated": 4, "mailOnce": true, "mailPeriod": 4, "mailTo": "string", "name": "string", "objectSubTypeId": 7, "objectTypeId": 5, "pluginId": 8, "severity": 1, "triggerConditions": [ { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} }, { "aggregation": {}, "comparison": {}, "duration": {}, "id": {}, "indicatorTypeId": {}, "isTrigger": {}, "message": {}, "policyId": {}, "sigmaDirection": {}, "type": {}, "unit": {}, "value": {} } ], "triggerExpression": "string", "triggerMessage": "string", "type": "other", "useCustomTraps": false, "useDefaultTraps": false, "useDeviceTraps": false, "userEnabled": 3 } ], "pageNumber": 5, "pageSize": 2, "totalElements": 6, "totalPages": 1 }