Skip to content
CYBERQUEST Documentation CYBERQUEST Docs User Documentation

Documentation

CYBERQUEST API

CYBERQUEST API documentation

The script runtime exposes the CQ object. The documented namespaces in this section are Actions, Collectors, Communications, DataSources, Integrations, Internals, Parsers, and Utils.

The remaining properties declared by the runtime are:

  • CQ.ANOMALY_STRING_SPLIT
  • CQ.DropEvent(Event)
  • CQ.GenericCredential, CQ.GenericSettings, CQ.Networks, and CQ.Cache
  • CQ.Test.DefaultParser and CQ.Test.ExternalAPIHashmap
  • CQ.Case and CQ.sleep(milliseconds)

Only use the names and casing shown here; they mirror the declarations in the runtime API.

In this section

01

Collectors

Collector classes exposed to CYBERQUEST scripts through CQ.Collectors.

02

Communications

Communication helpers exposed to CYBERQUEST scripts through CQ.Communications.

03

DataSources

Data source helpers exposed to CYBERQUEST scripts through CQ.DataSources.

04

Internals

Internal helpers exposed to CYBERQUEST scripts through CQ.Internals.

05

Parsers

Parsing utilities exposed to CYBERQUEST scripts through CQ.Parsers.

06

Utilities

General utilities exposed to CYBERQUEST scripts through CQ.Utils.

07

Actions

Action helpers exposed to CYBERQUEST scripts through CQ.Actions.

08

Integrations

Integration classes exposed to CYBERQUEST scripts through CQ.Integrations.

09

Automatic Lookback on Events

Search previously received events, correlate them with new information, and create alerts from matching events.