DescribeSuspEventDetail

告警事件分为告警与异常两个维度，一个告警事件包含多个异常事件。此API可以获取异常事件的详情。

调试

前往【API Explorer】在线调试，API Explorer 提供在线调用 API、动态生成 SDK Example 代码和快速检索接口等能力，能显著降低使用云 API 的难度，强烈推荐使用。

请求参数

返回参数

示例

请求示例

http(s)://[Endpoint]/?Action=DescribeSuspEventDetail
&From=aqs
&<公共请求参数>

正常返回示例

XML 格式

<DescribeSuspEventDetailResponse>
  <RequestId>43F670F3-AB40-4E91-BC7D-C57468834F67</RequestId>
  <HostId>aegis.cn-hangzhou.aliyuncs.com</HostId>
  <Code>200</Code>
  <Message>
		illegal parameter, xxxx
	</Message>
  <EventDesc>该文件极有可能是黑客成功入侵网站后种植的，建议您先确认文件合法性并处理。</EventDesc>
  <EventTypeDesc>网站后门-发现后门(Webshell)文件</EventTypeDesc>
  <EventStatus>1</EventStatus>
  <EventName>WEBSHELL</EventName>
  <SaleVersion>1</SaleVersion>
  <IntranetIp>10.0.0.161</IntranetIp>
  <DataSource>aegis_suspicious_file_v2</DataSource>
  <InstanceName>ca_cpm_test1</InstanceName>
  <Type>normal</Type>
  <CanBeDealOnLine>true</CanBeDealOnLine>
  <OperateMsg/>
  <Uuid>bffb12c3-590a-4db2-b538-XXXXXXXXXXXX</Uuid>
  <Details>
    <Type>text</Type>
    <Value>/data/ftpUser/pub/f12cd3bc5b484b0326309b48afb463fb</Value>
    <InfoType>trojan_path</InfoType>
    <Name>木马文件路径</Name>
  </Details>
  <Details>
    <Type>text</Type>
    <Value>--</Value>
    <Name>影响域名</Name>
  </Details>
  <Details>
    <Type>text</Type>
    <Value>2018-10-30 05:00:56</Value>
    <InfoType>frist_found_time</InfoType>
    <Name>首次发现时间</Name>
  </Details>
  <Details>
    <Type>text</Type>
    <Value>2018-10-30 11:43:45</Value>
    <InfoType>update_time</InfoType>
    <Name>更新时间</Name>
  </Details>
  <Details>
    <Type>text</Type>
    <Value>Webshell</Value>
    <InfoType>trojan_type</InfoType>
    <Name>木马类型</Name>
  </Details>
  <Details>
    <Type>html</Type>
    <Value>&lt;a href="http://yundun-aegis-webshell-file.oss-XXXXX"&gt;下载&lt;/a&gt;</Value>
    <InfoType>download_url</InfoType>
    <Name>源文件下载</Name>
  </Details>
  <InternetIp>39.105.41.176</InternetIp>
  <Level>serious</Level>
  <Id>129636</Id>
  <LastTime>2018-10-30 11:43:46</LastTime>
  <SasId>39938056</SasId>
</DescribeSuspEventDetailResponse>

JSON 格式

{
	"Uuid":"bffb12c3-590a-4db2-b538-XXXXXXXXXXXX",
	"EventName":"WEBSHELL",
	"EventStatus":1,
	"Message":"illegal parameter, xxxx\n",
	"LastTime":"2018-10-30 11:43:46",
	"Details":[
		{
			"Name":"木马文件路径",
			"Value":"/data/ftpUser/pub/f12cd3bc5b484b0326309b48afb463fb",
			"Type":"text",
			"InfoType":"trojan_path"
		},
		{
			"Name":"影响域名",
			"Value":"--",
			"Type":"text"
		},
		{
			"Name":"首次发现时间",
			"Value":"2018-10-30 05:00:56",
			"Type":"text",
			"InfoType":"frist_found_time"
		},
		{
			"Name":"更新时间",
			"Value":"2018-10-30 11:43:45",
			"Type":"text",
			"InfoType":"update_time"
		},
		{
			"Name":"木马类型",
			"Value":"Webshell",
			"Type":"text",
			"InfoType":"trojan_type"
		},
		{
			"Name":"源文件下载",
			"Value":"<a href=\"http://yundun-aegis-webshell-file.oss-XXXXX\">下载</a>",
			"Type":"html",
			"InfoType":"download_url"
		}
	],
	"Type":"normal",
	"InternetIp":"39.105.41.176",
	"HostId":"aegis.cn-hangzhou.aliyuncs.com",
	"EventTypeDesc":"网站后门-发现后门(Webshell)文件",
	"Code":"200",
	"DataSource":"aegis_suspicious_file_v2",
	"SasId":"39938056",
	"RequestId":"43F670F3-AB40-4E91-BC7D-C57468834F67",
	"IntranetIp":"10.0.0.161",
	"CauseDetails":[],
	"Id":129636,
	"Level":"serious",
	"EventDesc":"该文件极有可能是黑客成功入侵网站后种植的，建议您先确认文件合法性并处理。",
	"OperateMsg":"",
	"CanBeDealOnLine":true,
	"SaleVersion":"1",
	"InstanceName":"ca_cpm_test1"
}

错误码

查看本产品错误码