curl --request GET \
--url https://api.wirespeed.com/asset/case/{id} \
--header 'Authorization: Bearer <token>'
{
"endpoints": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"edrSourceId": "<string>",
"mdmSourceId": "<string>",
"name": "<string>",
"hva": true,
"hvaOverriddenByUser": true,
"createdAt": "<string>",
"privateIpAddress": "<string>",
"live": true,
"operatingSystem": "<string>",
"integrationId": {},
"contained": true,
"managed": true,
"publicIPs": [
{
"ipv4": "<string>",
"ipv6": "<string>",
"metadata": {
"ip": "<string>",
"hostname": "<string>",
"city": "<string>",
"region": "<string>",
"country": "<string>",
"loc": "<string>",
"postal": "<string>",
"timezone": "<string>",
"org": "<string>",
"asn": {
"asn": "<string>",
"name": "<string>",
"domain": "<string>",
"route": "<string>",
"type": "<string>"
},
"company": {
"name": "<string>",
"domain": "<string>",
"type": "<string>"
},
"privacy": {
"vpn": true,
"proxy": true,
"tor": true,
"relay": true,
"hosting": true,
"service": "<string>"
},
"abuse": {
"address": "<string>",
"country": "<string>",
"email": "<string>",
"name": "<string>",
"network": "<string>",
"phone": "<string>",
"ofac": true,
"adversarial": true
},
"domains": {
"ip": "<string>",
"total": 123,
"domains": [
"<string>"
]
},
"ofac": true,
"adversarial": true
},
"displayName": "<string>",
"id": "<string>",
"teamId": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>",
"locationId": "<string>",
"metadataLastFetchedAt": "<string>",
"known": true,
"safe": true,
"detectionSid": "<string>"
}
],
"workstation": true,
"server": true,
"mobile": true,
"updatedAt": "<string>",
"raw": {}
}
],
"directory": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"enabled": true,
"directoryId": "<string>",
"name": "<string>",
"phoneNumber": "<string>",
"previousPhoneNumber": "<string>",
"title": "<string>",
"email": "<string>",
"vip": true,
"nhi": true,
"financial": true,
"technical": true,
"managerDirectoryId": "<string>",
"managerEmail": "<string>",
"domain": "<string>",
"department": "<string>",
"createdAt": "<string>",
"integrationId": {},
"roles": [
"<string>"
],
"lastCredentialExposure": {},
"credentialsExposed": true,
"numberCredentialExposures": 123,
"lastCheckedForCredentialExposures": {},
"needsChatOpsWelcome": true,
"contained": true,
"username": "<string>",
"containable": true,
"smsConsentReceivedAt": {},
"administrator": true,
"updatedAt": "<string>",
"passwordLastChangedAt": "<string>",
"lastSignInAt": "<string>",
"raw": {},
"tags": [
{
"id": "<string>",
"directoryUserId": "<string>",
"tag": "VIP",
"automationId": "<string>",
"teamId": "<string>",
"overriddenByUser": true,
"enabled": true,
"createdAt": "<string>"
}
],
"managed": true
}
],
"processes": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"command": "<string>",
"sha256": "<string>",
"sha1": "<string>",
"createdAt": "<string>"
}
],
"domains": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"name": "<string>",
"createdAt": "<string>"
}
],
"locations": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"lat": "<string>",
"lon": "<string>",
"city": "<string>",
"state": "<string>",
"country": "<string>",
"countryCode": "<string>",
"continent": "<string>",
"continentCode": "<string>",
"createdAt": "<string>",
"known": true,
"safe": true,
"detectionSid": "<string>"
}
],
"files": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"lateStageTool": true,
"remoteManagementTool": true,
"malware": true,
"cryptoMiner": true,
"ransomware": true,
"infoStealer": true,
"benign": true,
"name": "<string>",
"path": "<string>",
"sha256": "<string>",
"sha1": "<string>",
"toolName": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>",
"lastEnrichedAt": "<string>",
"nameWithPath": "<string>",
"liveOffTheLand": true,
"nuisance": true,
"fileRisk": "BENIGN",
"metadata": {
"threatNames": [
{
"name": "<string>",
"engine": "<string>",
"excluded": true
}
],
"lastScanTime": {},
"story": "<string>",
"versionInfo": [
{
"name": "<string>",
"value": "<string>"
}
],
"proposedFileNames": [
"<string>"
]
},
"enrichedViaIntegration": true
}
],
"ips": [
{
"ipv4": "<string>",
"ipv6": "<string>",
"metadata": {
"ip": "<string>",
"hostname": "<string>",
"city": "<string>",
"region": "<string>",
"country": "<string>",
"loc": "<string>",
"postal": "<string>",
"timezone": "<string>",
"org": "<string>",
"asn": {
"asn": "<string>",
"name": "<string>",
"domain": "<string>",
"route": "<string>",
"type": "<string>"
},
"company": {
"name": "<string>",
"domain": "<string>",
"type": "<string>"
},
"privacy": {
"vpn": true,
"proxy": true,
"tor": true,
"relay": true,
"hosting": true,
"service": "<string>"
},
"abuse": {
"address": "<string>",
"country": "<string>",
"email": "<string>",
"name": "<string>",
"network": "<string>",
"phone": "<string>",
"ofac": true,
"adversarial": true
},
"domains": {
"ip": "<string>",
"total": 123,
"domains": [
"<string>"
]
},
"ofac": true,
"adversarial": true
},
"displayName": "<string>",
"id": "<string>",
"teamId": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>",
"locationId": "<string>",
"metadataLastFetchedAt": "<string>",
"known": true,
"safe": true,
"detectionSid": "<string>"
}
],
"userAgents": [
{
"id": "<string>",
"userAgent": "<string>",
"userAgentAlt": "<string>",
"teamId": "<string>",
"createdAt": "<string>",
"displayName": "<string>",
"browserName": "<string>",
"browserVersion": "<string>",
"browserMajorVersion": "<string>",
"cpuArchitecture": "<string>",
"deviceModel": "<string>",
"deviceVendor": "<string>",
"engineName": "<string>",
"engineVersion": "<string>",
"osName": "<string>",
"osVersion": "<string>"
}
]
}
curl --request GET \
--url https://api.wirespeed.com/asset/case/{id} \
--header 'Authorization: Bearer <token>'
{
"endpoints": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"edrSourceId": "<string>",
"mdmSourceId": "<string>",
"name": "<string>",
"hva": true,
"hvaOverriddenByUser": true,
"createdAt": "<string>",
"privateIpAddress": "<string>",
"live": true,
"operatingSystem": "<string>",
"integrationId": {},
"contained": true,
"managed": true,
"publicIPs": [
{
"ipv4": "<string>",
"ipv6": "<string>",
"metadata": {
"ip": "<string>",
"hostname": "<string>",
"city": "<string>",
"region": "<string>",
"country": "<string>",
"loc": "<string>",
"postal": "<string>",
"timezone": "<string>",
"org": "<string>",
"asn": {
"asn": "<string>",
"name": "<string>",
"domain": "<string>",
"route": "<string>",
"type": "<string>"
},
"company": {
"name": "<string>",
"domain": "<string>",
"type": "<string>"
},
"privacy": {
"vpn": true,
"proxy": true,
"tor": true,
"relay": true,
"hosting": true,
"service": "<string>"
},
"abuse": {
"address": "<string>",
"country": "<string>",
"email": "<string>",
"name": "<string>",
"network": "<string>",
"phone": "<string>",
"ofac": true,
"adversarial": true
},
"domains": {
"ip": "<string>",
"total": 123,
"domains": [
"<string>"
]
},
"ofac": true,
"adversarial": true
},
"displayName": "<string>",
"id": "<string>",
"teamId": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>",
"locationId": "<string>",
"metadataLastFetchedAt": "<string>",
"known": true,
"safe": true,
"detectionSid": "<string>"
}
],
"workstation": true,
"server": true,
"mobile": true,
"updatedAt": "<string>",
"raw": {}
}
],
"directory": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"enabled": true,
"directoryId": "<string>",
"name": "<string>",
"phoneNumber": "<string>",
"previousPhoneNumber": "<string>",
"title": "<string>",
"email": "<string>",
"vip": true,
"nhi": true,
"financial": true,
"technical": true,
"managerDirectoryId": "<string>",
"managerEmail": "<string>",
"domain": "<string>",
"department": "<string>",
"createdAt": "<string>",
"integrationId": {},
"roles": [
"<string>"
],
"lastCredentialExposure": {},
"credentialsExposed": true,
"numberCredentialExposures": 123,
"lastCheckedForCredentialExposures": {},
"needsChatOpsWelcome": true,
"contained": true,
"username": "<string>",
"containable": true,
"smsConsentReceivedAt": {},
"administrator": true,
"updatedAt": "<string>",
"passwordLastChangedAt": "<string>",
"lastSignInAt": "<string>",
"raw": {},
"tags": [
{
"id": "<string>",
"directoryUserId": "<string>",
"tag": "VIP",
"automationId": "<string>",
"teamId": "<string>",
"overriddenByUser": true,
"enabled": true,
"createdAt": "<string>"
}
],
"managed": true
}
],
"processes": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"command": "<string>",
"sha256": "<string>",
"sha1": "<string>",
"createdAt": "<string>"
}
],
"domains": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"name": "<string>",
"createdAt": "<string>"
}
],
"locations": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"lat": "<string>",
"lon": "<string>",
"city": "<string>",
"state": "<string>",
"country": "<string>",
"countryCode": "<string>",
"continent": "<string>",
"continentCode": "<string>",
"createdAt": "<string>",
"known": true,
"safe": true,
"detectionSid": "<string>"
}
],
"files": [
{
"id": "<string>",
"displayName": "<string>",
"teamId": "<string>",
"lateStageTool": true,
"remoteManagementTool": true,
"malware": true,
"cryptoMiner": true,
"ransomware": true,
"infoStealer": true,
"benign": true,
"name": "<string>",
"path": "<string>",
"sha256": "<string>",
"sha1": "<string>",
"toolName": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>",
"lastEnrichedAt": "<string>",
"nameWithPath": "<string>",
"liveOffTheLand": true,
"nuisance": true,
"fileRisk": "BENIGN",
"metadata": {
"threatNames": [
{
"name": "<string>",
"engine": "<string>",
"excluded": true
}
],
"lastScanTime": {},
"story": "<string>",
"versionInfo": [
{
"name": "<string>",
"value": "<string>"
}
],
"proposedFileNames": [
"<string>"
]
},
"enrichedViaIntegration": true
}
],
"ips": [
{
"ipv4": "<string>",
"ipv6": "<string>",
"metadata": {
"ip": "<string>",
"hostname": "<string>",
"city": "<string>",
"region": "<string>",
"country": "<string>",
"loc": "<string>",
"postal": "<string>",
"timezone": "<string>",
"org": "<string>",
"asn": {
"asn": "<string>",
"name": "<string>",
"domain": "<string>",
"route": "<string>",
"type": "<string>"
},
"company": {
"name": "<string>",
"domain": "<string>",
"type": "<string>"
},
"privacy": {
"vpn": true,
"proxy": true,
"tor": true,
"relay": true,
"hosting": true,
"service": "<string>"
},
"abuse": {
"address": "<string>",
"country": "<string>",
"email": "<string>",
"name": "<string>",
"network": "<string>",
"phone": "<string>",
"ofac": true,
"adversarial": true
},
"domains": {
"ip": "<string>",
"total": 123,
"domains": [
"<string>"
]
},
"ofac": true,
"adversarial": true
},
"displayName": "<string>",
"id": "<string>",
"teamId": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>",
"locationId": "<string>",
"metadataLastFetchedAt": "<string>",
"known": true,
"safe": true,
"detectionSid": "<string>"
}
],
"userAgents": [
{
"id": "<string>",
"userAgent": "<string>",
"userAgentAlt": "<string>",
"teamId": "<string>",
"createdAt": "<string>",
"displayName": "<string>",
"browserName": "<string>",
"browserVersion": "<string>",
"browserMajorVersion": "<string>",
"cpuArchitecture": "<string>",
"deviceModel": "<string>",
"deviceVendor": "<string>",
"engineName": "<string>",
"engineVersion": "<string>",
"osName": "<string>",
"osVersion": "<string>"
}
]
}
Bearer authentication header of the form Bearer <token>
, where <token>
is your auth token.
Case identifier
The response is of type object
.