Get Container Runtime Insight

curl -X GET "https://api.rad.security/accounts/example_string/container_runtime_insights/example_string?children_limit=100&most_recent_limit=1000" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_TOKEN"

import requests
import json

url = "https://api.rad.security/accounts/example_string/container_runtime_insights/example_string?children_limit=100&most_recent_limit=1000"
headers = {
  "Content-Type": "application/json",
  "Authorization": "Bearer YOUR_API_TOKEN"
}

response = requests.get(url, headers=headers)
print(response.json())

const response = await fetch("https://api.rad.security/accounts/example_string/container_runtime_insights/example_string?children_limit=100&most_recent_limit=1000", {
  method: "GET",
  headers: {
  "Content-Type": "application/json",
  "Authorization": "Bearer YOUR_API_TOKEN"
}
});

const data = await response.json();
console.log(data);

package main

import (
    "fmt"
    "net/http"
)

func main() {

    req, err := http.NewRequest("GET", "https://api.rad.security/accounts/example_string/container_runtime_insights/example_string?children_limit=100&most_recent_limit=1000", nil)
    if err != nil {
        panic(err)
    }

    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("Authorization", "Bearer YOUR_API_TOKEN")

    client := &http.Client{}
    resp, err := client.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    fmt.Println("Response Status:", resp.Status)
}

require 'net/http'
require 'json'

uri = URI('https://api.rad.security/accounts/example_string/container_runtime_insights/example_string?children_limit=100&most_recent_limit=1000')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true

request = Net::HTTP::Get.new(uri)
request['Content-Type'] = 'application/json'
request['Authorization'] = 'Bearer YOUR_API_TOKEN'

response = http.request(request)
puts response.body

{
  "accountID": "example_string",
  "analysis": [
    {
      "accountID": "example_string",
      "action": "example_string",
      "category": "example_string",
      "clusterID": "example_string",
      "createdAt": "example_string",
      "deletedAt": "example_string",
      "description": "example_string",
      "falsePositive": true,
      "falsePositiveMatchedRules": [
        "example_string"
      ],
      "falsePositiveReason": "example_string",
      "id": "example_string",
      "insightID": "example_string",
      "insightIDs": [
        "example_string"
      ],
      "llmProvider": "example_string",
      "maliciousProcessIDs": [
        "example_string"
      ],
      "mitreAttackTactics": [
        {
          "id": "example_string",
          "link": "example_string",
          "name": "John Doe"
        }
      ],
      "mitreAttackTechniques": [
        {
          "id": "example_string",
          "link": "example_string",
          "name": "John Doe",
          "tactics": [
            {
              "id": "example_string",
              "link": "example_string",
              "name": "John Doe"
            }
          ]
        }
      ],
      "model": "example_string",
      "partial": true,
      "prompt": "example_string",
      "promptDigest": "example_string",
      "refs": [
        "example_string"
      ],
      "remediation": "example_string",
      "severity": "example_string",
      "stale": true,
      "status": "example_string",
      "totalRequests": 42,
      "triggeredBy": "example_string",
      "updatedAt": "example_string"
    }
  ],
  "baseline": {
    "apiVersion": "example_string",
    "containers": [
      {
        "id": "example_string",
        "imageDigest": "example_string",
        "imageName": "John Doe",
        "name": "John Doe",
        "processes": [
          {
            "children": [
              {}
            ],
            "connections": [
              {
                "address": "123 Main St",
                "drift": true,
                "hostname": "John Doe",
                "k8sName": "John Doe",
                "k8sNamespace": "John Doe",
                "port": 42,
                "timestamp": "example_string",
                "trustedCIDR": "example_string"
              }
            ],
            "drift": true,
            "files": [
              {
                "drift": true,
                "path": "example_string",
                "timestamp": "example_string"
              }
            ],
            "gid": 123,
            "id": "example_string",
            "parentId": "example_string",
            "programs": [
              {
                "args": [
                  "example_string"
                ],
                "comm": "example_string",
                "drift": true,
                "hasPattern": true,
                "sampleArgs": [
                  [
                    "example_string"
                  ]
                ],
                "timestamp": "example_string"
              }
            ],
            "repetition": {
              "execCount": 10,
              "recentTimestamp": "example_string"
            },
            "timestamp": "example_string",
            "trustedIPPrefixes": [
              {
                "cidr": "example_string",
                "name": "John Doe",
                "port": 42
              }
            ],
            "uid": 123
          }
        ]
      }
    ],
    "kind": "example_string",
    "metadata": {
      "creationTimestamp": "example_string"
    }
  },
  "baselineCaptured": true,
  "baselineID": "example_string",
  "clusterID": "example_string",
  "createdAt": "example_string",
  "deletedAt": "example_string",
  "hasDrift": true,
  "id": "example_string",
  "llmAnalysis": {
    "accountID": "example_string",
    "action": "example_string",
    "category": "example_string",
    "clusterID": "example_string",
    "createdAt": "example_string",
    "deletedAt": "example_string",
    "description": "example_string",
    "falsePositive": true,
    "falsePositiveMatchedRules": [
      "example_string"
    ],
    "falsePositiveReason": "example_string",
    "id": "example_string",
    "insightID": "example_string",
    "insightIDs": [
      "example_string"
    ],
    "llmProvider": "example_string",
    "maliciousProcessIDs": [
      "example_string"
    ],
    "mitreAttackTactics": [
      {
        "id": "example_string",
        "link": "example_string",
        "name": "John Doe"
      }
    ],
    "mitreAttackTechniques": [
      {
        "id": "example_string",
        "link": "example_string",
        "name": "John Doe",
        "tactics": [
          {
            "id": "example_string",
            "link": "example_string",
            "name": "John Doe"
          }
        ]
      }
    ],
    "model": "example_string",
    "partial": true,
    "prompt": "example_string",
    "promptDigest": "example_string",
    "refs": [
      "example_string"
    ],
    "remediation": "example_string",
    "severity": "example_string",
    "stale": true,
    "status": "example_string",
    "totalRequests": 42,
    "triggeredBy": "example_string",
    "updatedAt": "example_string"
  },
  "malicious": true,
  "ongoing": {
    "apiVersion": "example_string",
    "containers": [
      {
        "id": "example_string",
        "imageDigest": "example_string",
        "imageName": "John Doe",
        "name": "John Doe",
        "processes": [
          {
            "children": [
              {}
            ],
            "connections": [
              {
                "address": "123 Main St",
                "drift": true,
                "hostname": "John Doe",
                "k8sName": "John Doe",
                "k8sNamespace": "John Doe",
                "port": 42,
                "timestamp": "example_string",
                "trustedCIDR": "example_string"
              }
            ],
            "drift": true,
            "files": [
              {
                "drift": true,
                "path": "example_string",
                "timestamp": "example_string"
              }
            ],
            "gid": 123,
            "id": "example_string",
            "parentId": "example_string",
            "programs": [
              {
                "args": [
                  "example_string"
                ],
                "comm": "example_string",
                "drift": true,
                "hasPattern": true,
                "sampleArgs": [
                  [
                    "example_string"
                  ]
                ],
                "timestamp": "example_string"
              }
            ],
            "repetition": {
              "execCount": 10,
              "recentTimestamp": "example_string"
            },
            "timestamp": "example_string",
            "trustedIPPrefixes": [
              {
                "cidr": "example_string",
                "name": "John Doe",
                "port": 42
              }
            ],
            "uid": 123
          }
        ]
      }
    ],
    "kind": "example_string",
    "metadata": {
      "creationTimestamp": "example_string"
    }
  },
  "severity": "example_string",
  "state": "example_string",
  "summary": {
    "container_meta": {
      "container_id": "example_string",
      "container_image_digest": "example_string",
      "container_image_name": "John Doe",
      "container_name": "John Doe",
      "runtime_name": "John Doe"
    },
    "createdAt": "example_string",
    "deletedAt": "example_string",
    "kube_meta": {
      "cluster_id": "example_string",
      "container_name": "John Doe",
      "namespace": "John Doe",
      "node_name": "John Doe",
      "pod_name": "John Doe"
    }
  },
  "updatedAt": "example_string"
}

{
  "code": "example_string",
  "request_id": "example_string",
  "status": 42,
  "validation_details": [
    {
      "code": "example_string",
      "field": "example_string",
      "message": "example_string",
      "param": "example_string"
    }
  ]
}

GET

/accounts/{account_id}/container_runtime_insights/{id}

GET

Base URLstring

Target server for requests. Edit to use your own host.

Bearer Token

Bearer Tokenstring

Required

Bearer token - just enter the token, "Bearer" prefix will be added automatically

Account id

Insight id

children_limitinteger

Children limit

query

most_recent_limitinteger

Most recent limit

Request Preview

Response

Response will appear here after sending the request

Authentication

header

Authorizationstring

Required

Bearer token. Authentication token required.

Path Parameters

Account id

Insight id

Query Parameters

children_limitinteger

Children limit

most_recent_limitinteger

Most recent limit

Responses

accountIDstring

analysisarray

baselineobject

baselineCapturedboolean

baselineIDstring

clusterIDstring

createdAtstring

deletedAtstring

hasDriftboolean

idstring

llmAnalysisobject

maliciousboolean

ongoingobject

severitystring

statestring

summaryobject

updatedAtstring

Was this page helpful?

curl -X GET "https://api.rad.security/accounts/example_string/container_runtime_insights/example_string?children_limit=100&most_recent_limit=1000" \ -H "Content-Type: application/json" \ -H "Authorization: Bearer YOUR_API_TOKEN"

{ "accountID": "example_string", "analysis": [ { "accountID": "example_string", "action": "example_string", "category": "example_string", "clusterID": "example_string", "createdAt": "example_string", "deletedAt": "example_string", "description": "example_string", "falsePositive": true, "falsePositiveMatchedRules": [ "example_string" ], "falsePositiveReason": "example_string", "id": "example_string", "insightID": "example_string", "insightIDs": [ "example_string" ], "llmProvider": "example_string", "maliciousProcessIDs": [ "example_string" ], "mitreAttackTactics": [ { "id": "example_string", "link": "example_string", "name": "John Doe" } ], "mitreAttackTechniques": [ { "id": "example_string", "link": "example_string", "name": "John Doe", "tactics": [ { "id": "example_string", "link": "example_string", "name": "John Doe" } ] } ], "model": "example_string", "partial": true, "prompt": "example_string", "promptDigest": "example_string", "refs": [ "example_string" ], "remediation": "example_string", "severity": "example_string", "stale": true, "status": "example_string", "totalRequests": 42, "triggeredBy": "example_string", "updatedAt": "example_string" } ], "baseline": { "apiVersion": "example_string", "containers": [ { "id": "example_string", "imageDigest": "example_string", "imageName": "John Doe", "name": "John Doe", "processes": [ { "children": [ {} ], "connections": [ { "address": "123 Main St", "drift": true, "hostname": "John Doe", "k8sName": "John Doe", "k8sNamespace": "John Doe", "port": 42, "timestamp": "example_string", "trustedCIDR": "example_string" } ], "drift": true, "files": [ { "drift": true, "path": "example_string", "timestamp": "example_string" } ], "gid": 123, "id": "example_string", "parentId": "example_string", "programs": [ { "args": [ "example_string" ], "comm": "example_string", "drift": true, "hasPattern": true, "sampleArgs": [ [ "example_string" ] ], "timestamp": "example_string" } ], "repetition": { "execCount": 10, "recentTimestamp": "example_string" }, "timestamp": "example_string", "trustedIPPrefixes": [ { "cidr": "example_string", "name": "John Doe", "port": 42 } ], "uid": 123 } ] } ], "kind": "example_string", "metadata": { "creationTimestamp": "example_string" } }, "baselineCaptured": true, "baselineID": "example_string", "clusterID": "example_string", "createdAt": "example_string", "deletedAt": "example_string", "hasDrift": true, "id": "example_string", "llmAnalysis": { "accountID": "example_string", "action": "example_string", "category": "example_string", "clusterID": "example_string", "createdAt": "example_string", "deletedAt": "example_string", "description": "example_string", "falsePositive": true, "falsePositiveMatchedRules": [ "example_string" ], "falsePositiveReason": "example_string", "id": "example_string", "insightID": "example_string", "insightIDs": [ "example_string" ], "llmProvider": "example_string", "maliciousProcessIDs": [ "example_string" ], "mitreAttackTactics": [ { "id": "example_string", "link": "example_string", "name": "John Doe" } ], "mitreAttackTechniques": [ { "id": "example_string", "link": "example_string", "name": "John Doe", "tactics": [ { "id": "example_string", "link": "example_string", "name": "John Doe" } ] } ], "model": "example_string", "partial": true, "prompt": "example_string", "promptDigest": "example_string", "refs": [ "example_string" ], "remediation": "example_string", "severity": "example_string", "stale": true, "status": "example_string", "totalRequests": 42, "triggeredBy": "example_string", "updatedAt": "example_string" }, "malicious": true, "ongoing": { "apiVersion": "example_string", "containers": [ { "id": "example_string", "imageDigest": "example_string", "imageName": "John Doe", "name": "John Doe", "processes": [ { "children": [ {} ], "connections": [ { "address": "123 Main St", "drift": true, "hostname": "John Doe", "k8sName": "John Doe", "k8sNamespace": "John Doe", "port": 42, "timestamp": "example_string", "trustedCIDR": "example_string" } ], "drift": true, "files": [ { "drift": true, "path": "example_string", "timestamp": "example_string" } ], "gid": 123, "id": "example_string", "parentId": "example_string", "programs": [ { "args": [ "example_string" ], "comm": "example_string", "drift": true, "hasPattern": true, "sampleArgs": [ [ "example_string" ] ], "timestamp": "example_string" } ], "repetition": { "execCount": 10, "recentTimestamp": "example_string" }, "timestamp": "example_string", "trustedIPPrefixes": [ { "cidr": "example_string", "name": "John Doe", "port": 42 } ], "uid": 123 } ] } ], "kind": "example_string", "metadata": { "creationTimestamp": "example_string" } }, "severity": "example_string", "state": "example_string", "summary": { "container_meta": { "container_id": "example_string", "container_image_digest": "example_string", "container_image_name": "John Doe", "container_name": "John Doe", "runtime_name": "John Doe" }, "createdAt": "example_string", "deletedAt": "example_string", "kube_meta": { "cluster_id": "example_string", "container_name": "John Doe", "namespace": "John Doe", "node_name": "John Doe", "pod_name": "John Doe" } }, "updatedAt": "example_string" }