Get Catalogue Rule

GET 
/api/v1/sigma/catalogue/:rule_id

Get one stored rule (full content + provenance).

Request

Responses

200

Successful Response

401

No valid session: the credentials are missing, invalid or expired, or the account behind them is disabled or blocked

403

Refused: the session lacks the action this route checks, or its account must replace an issued password first. A SCIM route answers a refused action in the RFC 7644 error envelope

422

Validation Error

default

Problem details (RFC 9457)