{"uid":"cap_zHfDYFKWpe87E7Fwor7TB","slug":"telesint-artifact-export-27e7bf75","name":"TeleSint Artifact Export","description":"CTI artifact export from a TeleSint record. Required: id (record UUID), format (sigma|stix|report). Returns Sigma rule, STIX 2.1 bundle, or structured analyst report built from real enriched intel.","url":"https://telesint-api.onrender.com/artifact","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["id","format"],"properties":{"id":{"type":"string","description":"Intel record UUID from any TeleSint endpoint response (items[].id)"},"format":{"type":"string","description":"Artifact format: sigma (detection rule) | stix (STIX 2.1 bundle) | report (analyst report)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"format":"stix","source":"TeleSint","artifact":{"id":"bundle--f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d","type":"bundle","objects":[{"id":"indicator--f8a3c1d2-ip-0","name":"IP: 91.92.109.83","type":"indicator","labels":["malicious-activity"],"pattern":"[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.92.109.83']","confidence":90,"valid_from":"2026-05-27T09:15:00Z","pattern_type":"stix","spec_version":"2.1"},{"id":"attack-pattern--f8a3c1d2-T1071-001","name":"Application Layer Protocol: Web Protocols","type":"attack-pattern","spec_version":"2.1","external_references":[{"external_id":"T1071.001","source_name":"mitre-attack"}]},{"id":"report--f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d","name":"Cobalt Strike beacon with malleable C2 profile mimicking Microsoft update traffic","type":"report","labels":["c2","cobalt-strike","malleable-c2"],"confidence":90,"spec_version":"2.1"}],"spec_version":"2.1"},"category":"c2","endpoint":"artifact","record_id":"f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d","generated_at":"2026-06-01T12:00:00Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_od-Ol6xzmE5rN1bhJG1pq","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Exports a structured artifact (Sigma rule, STIX 2.1 bundle, or analyst report) for a specific threat intelligence record by UUID","exampleAgentPrompt":"I just got a TeleSint record ID 'f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d' from a C2 lookup — can you export it as a STIX 2.1 bundle so I can feed it into my threat intel platform?","exampleUseCases":null,"resultDescription":"A structured artifact keyed to the requested format: a STIX 2.1 bundle (with indicator, attack-pattern, and report objects tagged with MITRE ATT&CK techniques and confidence scores), a Sigma detection rule, or a prose analyst report — all derived from the original TeleSint intelligence record and enriched by DeepSeek AI with TLP classification.","failureModes":["Missing or invalid UUID returns a 400 or 404 error","Invalid format enum value returns a validation error","Payment not completed via USDC on Base mainnet returns a 402 Payment Required","Record UUID not found in TeleSint database returns empty or error response","Render cold-start latency may cause initial timeout on first request"],"whenToPreferThis":"Use this endpoint when you already have a TeleSint record UUID (from any other TeleSint endpoint) and need to export it in a specific structured format — Sigma for SIEM ingestion, STIX 2.1 for threat intel platforms (e.g. OpenCTI, MISP), or analyst report for human review. Prefer this over re-querying the source endpoint when you need a different output representation of an already-retrieved record.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:32:12.469Z","isFirstParty":false}