IPS rule feed

curl -sk -X GET "https://${CONTROLLER}/v2.5/api/dcf/ips-rule-feeds/{feed_uuid}" \
  -H "Authorization: cid ${CID}"

import requests

url = f"https://{CONTROLLER}/v2.5/api/dcf/ips-rule-feeds/{feed_uuid}"
headers = {"Authorization": f"cid {cid}"}

response = requests.get(url, headers=headers)
print(response.text)

package main

import (
  "fmt"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("GET", "https://"+controller+"/v2.5/api/dcf/ips-rule-feeds/{feed_uuid}", nil)
  req.Header.Set("Authorization", "cid "+cid)

  client := &http.Client{}
  resp, err := client.Do(req)
  if err != nil {
    panic(err)
  }
  defer resp.Body.Close()

  fmt.Println(resp.Status)
}

{
  "content_hash": "a1b2c3d4e5f6789...",
  "feed_name": "malware_detection_rules",
  "feed_type": "custom",
  "ips_rules": [
    "alert tls $HOME_NET any -> any any (msg:\"ET MALWARE Example Rule\"; flow:established,to_server; classtype:domain-c2; sid:2063567; rev:1;)"
  ],
  "last_updated_time": "2024-01-15T10:30:00Z",
  "uuid": "550e8400-e29b-41d4-a716-446655440000"
}

{
  "message": "No file provided in request"
}

{
  "message": "<string>"
}