API overview

The exact OpenAPI spec may evolve; this section lists conceptual routes. Confirm paths in edr-api-handler.py.

Method	Path (concept)	Purpose
POST	/events	Ingest event from agent
GET	/events	List events
GET	/events/{eventId}/details	Event detail
PATCH	/events/{eventId}/handle	Status update
GET	/events/{eventId}/ai-analysis	Get or trigger AI analysis
POST	/events/{eventId}/ai-chat	Follow-up chat
GET	/events/{eventId}/virustotal	VirusTotal report for hashes
GET/POST	/rules	Rules CRUD
GET	/agents	Agent listing

Base URL — Typically https://{api-id}.execute-api.{region}.amazonaws.com/prod (stage name may differ).

CORS — Required for browser access from the console origin; API Gateway must allow your console.ravisarode.com (or dev) origin.