{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Wirespeed","colors":{"primary":"#8B5CF6","light":"#8B5CF6","dark":"#8B5CF6"},"logo":{"light":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c","dark":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-dark.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=417d1d1996a8bb6674c9333da34ba256"},"favicon":"https://mintcdn.com/wirespeed/W6Ho2vhJrlRtLlBr/favicon.svg?fit=max\u0026auto=format\u0026n=W6Ho2vhJrlRtLlBr\u0026q=85\u0026s=ca5a14e92c415079a7c4742d16482b88","navbar":{"primary":{"type":"button","label":"Back to Wirespeed","href":"https://app.wirespeed.co"}},"footer":{"socials":{"x":"https://x.com/_wirespeed","github":"https://github.com/wirespeedsecurity","linkedin":"https://linkedin.com/company/wirespeedsecurity"}},"icons":{"library":"lucide"},"contextual":{"options":["copy","view","chatgpt","claude"],"display":"header"},"styling":{"latex":false},"navigation":{"languages":[{"language":"en","default":true,"href":"introduction"},{"language":"fr","hidden":false,"navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"href":"fr/introduction"},{"language":"de","hidden":false,"navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"href":"de/introduction"}]}},"deployment":{"deploymentMetadataValue":{"subdomain":"wirespeed","hasAudioNarration":false,"actualSubdomain":"wirespeed","customDomains":["docs.wirespeed.co"],"gitSource":{"type":"github","owner":"binaryedge","repo":"wirespeed-app","deployBranch":"main","contentDirectory":"apps/documentation","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aecbfa764441d6863c99943","collectionId":"ca6de594-1819-4889-afd4-759e02e6760f","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aecbfa764441d6863c99943"},"entitlements":{},"buildId":"6aee2e4f4037d8a342c0549e","clientVersion":"0.0.4076","searchFilterCounts":[{"language":"en","tag":"Documentation","count":134},{"language":"de","tag":"Dokumentation","count":134},{"language":"fr","tag":"Documentation","count":134},{"language":"default","tag":"API Reference","count":112},{"language":"default","tag":"Endpoints","count":111},{"language":"en","tag":"Integrations","count":104},{"language":"de","tag":"Integrationen","count":104},{"language":"fr","tag":"Intégrations","count":104},{"language":"default","tag":"Team","count":23},{"language":"default","tag":"Cases","count":14},{"language":"default","tag":"Detection","count":14},{"language":"default","tag":"Integration","count":14},{"language":"default","tag":"Asset","count":12},{"language":"default","tag":"Documentation","count":8},{"language":"default","tag":"Integrations","count":8},{"language":"default","tag":"Directory","count":7},{"language":"en","tag":"Assets","count":7},{"language":"de","tag":"Assets","count":7},{"language":"fr","tag":"Actifs","count":7},{"language":"en","tag":"Remediation","count":5},{"language":"en","tag":"Settings","count":5},{"language":"de","tag":"Behebung","count":5},{"language":"de","tag":"Einstellungen","count":5},{"language":"fr","tag":"Remédiation","count":5},{"language":"fr","tag":"Paramètres","count":5},{"language":"en","tag":"Events","count":4},{"language":"de","tag":"Ereignisse","count":4},{"language":"fr","tag":"Événements","count":4},{"language":"en","tag":"Chat Ops","count":3},{"language":"en","tag":"Get Started","count":3},{"language":"de","tag":"Chat Ops","count":3},{"language":"de","tag":"Erste Schritte","count":3},{"language":"fr","tag":"Chat Ops","count":3},{"language":"fr","tag":"Prise en main","count":3},{"language":"en","tag":"Custom Detections","count":2},{"language":"de","tag":"Benutzerdefinierte Detektionen","count":2},{"language":"fr","tag":"Détections personnalisées","count":2},{"language":"en","tag":"Exclusions","count":1},{"language":"de","tag":"Ausnahmen","count":1},{"language":"fr","tag":"Exclusions","count":1}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"styles.css","content":"img[src*=\"logo\"]{width:175px!important;height:auto!important;max-width:175px!important}header img,nav img,a[href=\"/\"] img{width:175px!important;height:auto!important;max-width:175px!important}"}],"page":{"pagePath":"api-reference/asset/get-all-assets-for-a-case","slug":"/api-reference/asset/get-all-assets-for-a-case","pageMetadata":{"title":"Get all assets for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case","autogeneratedByOpenApi":true},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Get all assets for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"operationId":"AssetController_getAllByCaseId","parameters":["43b64807-541e-40fe-9dbb-0fcf66c5d23d"],"responses":{"200":"e0f24591-fede-4676-be91-ede5c005cd83","400":"90499138-8c62-4c59-be8d-19ba22755d73"},"security":["9797368a-29f2-470d-bde4-a960d3ea2eff"],"summary":"Get all assets for a case","tags":["Asset"],"method":"get","type":"path","servers":["687faaa7-d478-42a7-8b2f-e3bf1c3d4068"],"path":"/v1/asset/case/{id}","baseUrlOptions":["https://api.wirespeed.co"],"title":"Get all assets for a case","description":"","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"43b64807-541e-40fe-9dbb-0fcf66c5d23d":{"name":"id","required":true,"in":"path","description":"Case identifier","schema":{"type":"string","isRequired":true,"description":"Case identifier","uniqueKey":"","typeLabel":"string"}}},"responses":{"e0f24591-fede-4676-be91-ede5c005cd83":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"endpoints":{"description":"Array of endpoint assets","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the endpoint","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].id","typeLabel":"string"},"displayName":{"type":"string","description":"Human-readable display name for the endpoint","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].displayName","typeLabel":"string"},"teamId":{"type":"string","description":"ID of the team that owns this endpoint","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].teamId","typeLabel":"string"},"hva":{"type":"boolean","description":"Indicates if this is a Critical Asset","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].hva","typeLabel":"boolean"},"createdAt":{"type":"string","description":"Timestamp when the endpoint was created","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].createdAt","typeLabel":"string"},"integrationId":{"oneOf":[{"type":"string","description":"ID of the integration that discovered this endpoint","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].integrationId.oneOf.0","typeLabel":"string"},{"type":"null","description":"ID of the integration that discovered this endpoint","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].integrationId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"endpoints.items.[INDEX].integrationId","typeLabel":"string | null"},"contained":{"type":"boolean","description":"Indicates if the endpoint has been contained/isolated","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].contained","typeLabel":"boolean"},"workstation":{"type":"boolean","description":"Indicates if this is a workstation device","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].workstation","typeLabel":"boolean"},"server":{"type":"boolean","description":"Indicates if this is a server device","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].server","typeLabel":"boolean"},"mobile":{"type":"boolean","description":"Indicates if this is a mobile device","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].mobile","typeLabel":"boolean"},"domainController":{"type":"boolean","description":"Indicates if this is a domain controller","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].domainController","typeLabel":"boolean"},"groups":{"description":"Groups assigned to this endpoint","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the endpoint group","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].id","typeLabel":"string"},"endpointId":{"type":"string","description":"ID of the endpoint this group belongs to","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].endpointId","typeLabel":"string"},"group":{"type":"string","description":"Group type (system enum or custom string)","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].group","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this group","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].teamId","typeLabel":"string"},"enabled":{"type":"boolean","description":"Whether the group is currently enabled","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].enabled","typeLabel":"boolean"},"createdAt":{"type":"string","description":"Timestamp when the group was created","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].createdAt","typeLabel":"string"},"overriddenByUser":{"type":"boolean","description":"Whether the group was manually overridden by a user","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].overriddenByUser","typeLabel":"boolean"},"groupId":{"type":"string","description":"Group ID from the group table","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupId","typeLabel":"string"},"overriddenByUserId":{"type":"string","description":"ID of the user who manually overrode the group","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].overriddenByUserId","typeLabel":"string"},"overriddenByUserIdentifier":{"oneOf":[{"type":"string","description":"Email of the user who manually overrode the group (persists after user deletion)","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].overriddenByUserIdentifier.oneOf.0","typeLabel":"string"},{"type":"null","description":"Email of the user who manually overrode the group (persists after user deletion)","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].overriddenByUserIdentifier.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].overriddenByUserIdentifier","typeLabel":"string | null"},"groupName":{"type":"string","description":"Display name of the associated group","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupName","typeLabel":"string"},"groupSlug":{"type":"string","description":"Slug of the associated group","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupSlug","typeLabel":"string"},"groupContainmentEnabled":{"type":"boolean","description":"Whether the associated group allows containment","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupContainmentEnabled","typeLabel":"boolean"},"groupChatOpsEnabled":{"type":"boolean","description":"Whether the associated group allows chat ops","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupChatOpsEnabled","typeLabel":"boolean"},"groupSourceSystemUpdates":{"type":"boolean","description":"Whether the associated group allows outbound updates to the source product","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupSourceSystemUpdates","typeLabel":"boolean"},"groupAlwaysNotify":{"type":"boolean","description":"Whether the associated group always escalates detections for notification","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupAlwaysNotify","typeLabel":"boolean"},"groupIcon":{"oneOf":[{"type":"string","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"description":"Chip icon stored on the associated group","x-extensible-enum":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupIcon.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"description":"Chip icon stored on the associated group","x-extensible-enum":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupIcon.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupIcon","typeLabel":"enum\u003cstring> | null"},"groupRuleSearch":{"type":"string","description":"Search expression from the group rule that added this group membership","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupRuleSearch","typeLabel":"string"},"groupRuleSearchField":{"type":"string","description":"Search field from the group rule that added this group membership","uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupRuleSearchField","typeLabel":"string"},"groupRuleSearchType":{"type":"string","enum":["text","regexp"],"description":"Search type from the group rule that added this group membership","x-extensible-enum":true,"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX].groupRuleSearchType","typeLabel":"enum\u003cstring>"}},"required":["id","endpointId","group","teamId","enabled","createdAt","overriddenByUser","groupId"],"uniqueKey":"endpoints.items.[INDEX].groups.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groups","typeLabel":"object[]"},"groupContainmentEnabled":{"type":"boolean","description":"Whether all groups on this endpoint allow containment","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groupContainmentEnabled","typeLabel":"boolean"},"groupChatOpsEnabled":{"type":"boolean","description":"Whether all groups on this endpoint allow chat ops","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groupChatOpsEnabled","typeLabel":"boolean"},"groupSourceSystemUpdates":{"type":"boolean","description":"Whether all groups on this endpoint allow outbound updates to the source product","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groupSourceSystemUpdates","typeLabel":"boolean"},"groupsSynced":{"type":"boolean","description":"Whether this endpoint has had its first round of group checks run","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].groupsSynced","typeLabel":"boolean"},"sourceDispositions":{"type":"array","description":"Actions the source product reported taking on this asset for the detection","items":{"type":"string","enum":["BLOCKED","QUARANTINED","KILLED","REMEDIATED","ISOLATED","PASSWORD_RESET","ACTION_FAILED"],"x-extensible-enum":true,"uniqueKey":"endpoints.items.[INDEX].sourceDispositions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"endpoints.items.[INDEX].sourceDispositions","typeLabel":"enum\u003cstring>[]"},"edrSourceId":{"type":"string","description":"ID from the EDR (Endpoint Detection \u0026 Response) system","uniqueKey":"endpoints.items.[INDEX].edrSourceId","typeLabel":"string"},"mdmSourceId":{"type":"string","description":"ID from the MDM (Mobile Device Management) system","uniqueKey":"endpoints.items.[INDEX].mdmSourceId","typeLabel":"string"},"name":{"type":"string","description":"Name of the endpoint","uniqueKey":"endpoints.items.[INDEX].name","typeLabel":"string"},"hvaOverriddenByUser":{"type":"boolean","description":"Indicates if the Critical Asset status was manually overridden by a user","uniqueKey":"endpoints.items.[INDEX].hvaOverriddenByUser","typeLabel":"boolean"},"privateIpAddress":{"type":"string","description":"Private IP address of the endpoint","uniqueKey":"endpoints.items.[INDEX].privateIpAddress","typeLabel":"string"},"live":{"type":"boolean","description":"Indicates if the endpoint is currently active/online","uniqueKey":"endpoints.items.[INDEX].live","typeLabel":"boolean"},"operatingSystem":{"type":"string","description":"Operating system of the endpoint","uniqueKey":"endpoints.items.[INDEX].operatingSystem","typeLabel":"string"},"operatingSystemCategory":{"type":"string","enum":["Windows","Windows Server","macOS","Linux","iOS","Android","ChromeOS","Network Device","Other"],"description":"Categorized operating system type","x-extensible-enum":true,"uniqueKey":"endpoints.items.[INDEX].operatingSystemCategory","typeLabel":"enum\u003cstring>"},"canonicalId":{"oneOf":[{"type":"string","description":"When set, this row is a duplicate source; points at the canonical representative endpoint id","uniqueKey":"endpoints.items.[INDEX].canonicalId.oneOf.0","typeLabel":"string"},{"type":"null","description":"When set, this row is a duplicate source; points at the canonical representative endpoint id","uniqueKey":"endpoints.items.[INDEX].canonicalId.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalId","typeLabel":"string | null"},"canonicalClusterMemberCount":{"oneOf":[{"type":"number","description":"Child endpoint rows in the same canonical cluster (canonical_id = root), excluding the root row; null when there are no children","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMemberCount.oneOf.0","typeLabel":"number"},{"type":"null","description":"Child endpoint rows in the same canonical cluster (canonical_id = root), excluding the root row; null when there are no children","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMemberCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMemberCount","typeLabel":"number | null"},"canonicalClusterMembers":{"oneOf":[{"description":"Preview of other integration-backed rows in the same canonical cluster (at most five children when count exceeds five); null when none","example":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Directory user or endpoint id","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].id","typeLabel":"string"},"displayLabel":{"type":"string","description":"Display label for the row","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].displayLabel","typeLabel":"string"},"integrationId":{"oneOf":[{"type":"string","description":"Integration id for this source row","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId.oneOf.0","typeLabel":"string"},{"type":"null","description":"Integration id for this source row","isRequired":true,"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId","typeLabel":"string | null"},"integrationPlatform":{"oneOf":[{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true,"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true,"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform","typeLabel":"enum\u003cstring> | null"},"name":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].name.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].name.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].name","typeLabel":"string | null"},"username":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].username.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].username.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].username","typeLabel":"string | null"},"email":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].email.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].email.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].email","typeLabel":"string | null"},"additionalEmails":{"oneOf":[{"type":"array","items":{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.0","typeLabel":"string[]"},{"type":"null","items":{"type":"string"},"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails","typeLabel":"string[] | null"},"roles":{"oneOf":[{"type":"array","items":{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.0","typeLabel":"string[]"},{"type":"null","items":{"type":"string"},"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles","typeLabel":"string[] | null"},"title":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].title.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].title.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].title","typeLabel":"string | null"},"department":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].department.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].department.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].department","typeLabel":"string | null"},"managed":{"oneOf":[{"type":"boolean","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].managed.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].managed.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].managed","typeLabel":"boolean | null"},"enabled":{"oneOf":[{"type":"boolean","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].enabled.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].enabled.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].enabled","typeLabel":"boolean | null"},"createdAt":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt","typeLabel":"string | null"},"updatedAt":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt","typeLabel":"string | null"},"live":{"oneOf":[{"type":"boolean","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].live.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].live.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].live","typeLabel":"boolean | null"},"operatingSystem":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem","typeLabel":"string | null"},"privateIpAddress":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress","typeLabel":"string | null"},"publicIpAddress":{"oneOf":[{"type":"string","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress","typeLabel":"string | null"}},"required":["id","displayLabel","integrationId"],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX]","typeLabel":"object"},"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.0","typeLabel":"object[]"},{"description":"Preview of other integration-backed rows in the same canonical cluster (at most five children when count exceeds five); null when none","example":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"type":"null","items":{"type":"object","properties":{"id":{"type":"string","description":"Directory user or endpoint id"},"displayLabel":{"type":"string","description":"Display label for the row"},"integrationId":{"oneOf":[{"type":"string","description":"Integration id for this source row"},{"type":"null","description":"Integration id for this source row"}]},"integrationPlatform":{"oneOf":[{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true},{"type":"null","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true}]},"name":{"oneOf":[{"type":"string"},{"type":"null"}]},"username":{"oneOf":[{"type":"string"},{"type":"null"}]},"email":{"oneOf":[{"type":"string"},{"type":"null"}]},"additionalEmails":{"oneOf":[{"type":"array","items":{"type":"string"}},{"type":"null","items":{"type":"string"}}]},"roles":{"oneOf":[{"type":"array","items":{"type":"string"}},{"type":"null","items":{"type":"string"}}]},"title":{"oneOf":[{"type":"string"},{"type":"null"}]},"department":{"oneOf":[{"type":"string"},{"type":"null"}]},"managed":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"enabled":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"createdAt":{"oneOf":[{"type":"string"},{"type":"null"}]},"updatedAt":{"oneOf":[{"type":"string"},{"type":"null"}]},"live":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"operatingSystem":{"oneOf":[{"type":"string"},{"type":"null"}]},"privateIpAddress":{"oneOf":[{"type":"string"},{"type":"null"}]},"publicIpAddress":{"oneOf":[{"type":"string"},{"type":"null"}]}},"required":["id","displayLabel","integrationId"]},"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].canonicalClusterMembers","typeLabel":"object[] | null"},"managed":{"type":"boolean","description":"Indicates if the endpoint is managed by MDM/EDR","uniqueKey":"endpoints.items.[INDEX].managed","typeLabel":"boolean"},"publicIpAddress":{"type":"string","description":"Public IP address associated with this endpoint","uniqueKey":"endpoints.items.[INDEX].publicIpAddress","typeLabel":"string"},"lastSeenAt":{"type":"string","description":"Timestamp when the endpoint was last seen","uniqueKey":"endpoints.items.[INDEX].lastSeenAt","typeLabel":"string"},"updatedAt":{"type":"string","description":"Timestamp when the endpoint was last updated","uniqueKey":"endpoints.items.[INDEX].updatedAt","typeLabel":"string"},"raw":{"type":"object","description":"Raw data from the integration source","uniqueKey":"endpoints.items.[INDEX].raw","typeLabel":"object"},"lockPin":{"oneOf":[{"type":"string","description":"Lock PIN for this device, set when the device was locked via MDM (e.g. JumpCloud Apple MDM). Null if not locked or PIN not available.","uniqueKey":"endpoints.items.[INDEX].lockPin.oneOf.0","typeLabel":"string"},{"type":"null","description":"Lock PIN for this device, set when the device was locked via MDM (e.g. JumpCloud Apple MDM). Null if not locked or PIN not available.","uniqueKey":"endpoints.items.[INDEX].lockPin.oneOf.1","typeLabel":"null"}],"uniqueKey":"endpoints.items.[INDEX].lockPin","typeLabel":"string | null"}},"required":["id","displayName","teamId","hva","createdAt","integrationId","contained","workstation","server","mobile","domainController","groups","groupContainmentEnabled","groupChatOpsEnabled","groupSourceSystemUpdates","groupsSynced"],"uniqueKey":"endpoints.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"endpoints","typeLabel":"object[]"},"directory":{"description":"Array of directory user assets","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the directory user","isRequired":true,"uniqueKey":"directory.items.[INDEX].id","typeLabel":"string"},"displayName":{"type":"string","description":"Display name for the user","isRequired":true,"uniqueKey":"directory.items.[INDEX].displayName","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this user","isRequired":true,"uniqueKey":"directory.items.[INDEX].teamId","typeLabel":"string"},"additionalEmails":{"description":"Additional email addresses of the user","type":"array","items":{"type":"string","uniqueKey":"directory.items.[INDEX].additionalEmails.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"directory.items.[INDEX].additionalEmails","typeLabel":"string[]"},"allEmails":{"description":"All email addresses of the user (primary + additional)","type":"array","items":{"type":"string","uniqueKey":"directory.items.[INDEX].allEmails.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"directory.items.[INDEX].allEmails","typeLabel":"string[]"},"createdAt":{"type":"string","description":"Timestamp when the user was created","isRequired":true,"uniqueKey":"directory.items.[INDEX].createdAt","typeLabel":"string"},"integrationId":{"oneOf":[{"type":"string","description":"ID of the integration this user came from","isRequired":true,"uniqueKey":"directory.items.[INDEX].integrationId.oneOf.0","typeLabel":"string"},{"type":"null","description":"ID of the integration this user came from","isRequired":true,"uniqueKey":"directory.items.[INDEX].integrationId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"directory.items.[INDEX].integrationId","typeLabel":"string | null"},"canonicalClusterEmails":{"description":"Every email address across the whole canonical cluster (this row plus every linked source row), so authentication history reads span all of the directories the person exists in rather than the single source being viewed. Falls back to this row's emails when the row has no cluster.","type":"array","items":{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterEmails.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterEmails","typeLabel":"string[]"},"credentialsExposed":{"type":"boolean","description":"Whether the user's credentials have been exposed","isRequired":true,"uniqueKey":"directory.items.[INDEX].credentialsExposed","typeLabel":"boolean"},"numberCredentialExposures":{"type":"number","description":"Number of times user credentials have been exposed","isRequired":true,"uniqueKey":"directory.items.[INDEX].numberCredentialExposures","typeLabel":"number"},"containable":{"type":"boolean","description":"Whether the user can be contained via automation. Deprecated — use isUserContainable logic in the containment dialog instead. This is just an alias to user.managed","deprecated":true,"isRequired":true,"uniqueKey":"directory.items.[INDEX].containable","typeLabel":"boolean"},"smsInviteAttempts":{"type":"number","description":"Number of SMS invite attempts sent","isRequired":true,"uniqueKey":"directory.items.[INDEX].smsInviteAttempts","typeLabel":"number"},"groups":{"description":"Groups assigned to this user","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the user group","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].id","typeLabel":"string"},"directoryUserId":{"type":"string","description":"ID of the directory user this group belongs to","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].directoryUserId","typeLabel":"string"},"group":{"type":"string","description":"Type of group assigned to the user","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].group","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this group","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].teamId","typeLabel":"string"},"overriddenByUser":{"type":"boolean","description":"Whether the group was manually overridden by a user","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].overriddenByUser","typeLabel":"boolean"},"overriddenByUserId":{"oneOf":[{"type":"string","description":"ID of the user who manually overrode the group","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].overriddenByUserId.oneOf.0","typeLabel":"string"},{"type":"null","description":"ID of the user who manually overrode the group","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].overriddenByUserId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].overriddenByUserId","typeLabel":"string | null"},"overriddenByUserIdentifier":{"oneOf":[{"type":"string","description":"Email of the user who manually overrode the group (persists after user deletion)","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].overriddenByUserIdentifier.oneOf.0","typeLabel":"string"},{"type":"null","description":"Email of the user who manually overrode the group (persists after user deletion)","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].overriddenByUserIdentifier.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].overriddenByUserIdentifier","typeLabel":"string | null"},"enabled":{"type":"boolean","description":"Whether the group is currently enabled","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].enabled","typeLabel":"boolean"},"createdAt":{"type":"string","description":"Timestamp when the group was created","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].createdAt","typeLabel":"string"},"groupId":{"type":"string","description":"Group ID from the group table","isRequired":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupId","typeLabel":"string"},"groupName":{"type":"string","description":"Display name of the associated group","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupName","typeLabel":"string"},"groupSlug":{"type":"string","description":"Slug of the associated group","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupSlug","typeLabel":"string"},"groupContainmentEnabled":{"type":"boolean","description":"Whether the associated group allows containment","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupContainmentEnabled","typeLabel":"boolean"},"groupChatOpsEnabled":{"type":"boolean","description":"Whether the associated group allows chat ops","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupChatOpsEnabled","typeLabel":"boolean"},"groupSourceSystemUpdates":{"type":"boolean","description":"Whether the associated group allows outbound updates to the source product","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupSourceSystemUpdates","typeLabel":"boolean"},"groupAlwaysNotify":{"type":"boolean","description":"Whether the associated group always escalates detections for notification","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupAlwaysNotify","typeLabel":"boolean"},"groupIcon":{"oneOf":[{"type":"string","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"description":"Chip icon stored on the associated group","x-extensible-enum":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupIcon.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"description":"Chip icon stored on the associated group","x-extensible-enum":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupIcon.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupIcon","typeLabel":"enum\u003cstring> | null"},"groupRuleSearch":{"type":"string","description":"Search expression from the group rule that added this group membership","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupRuleSearch","typeLabel":"string"},"groupRuleSearchField":{"type":"string","description":"Search field from the group rule that added this group membership","uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupRuleSearchField","typeLabel":"string"},"groupRuleSearchType":{"type":"string","enum":["text","regexp"],"description":"Search type from the group rule that added this group membership","x-extensible-enum":true,"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX].groupRuleSearchType","typeLabel":"enum\u003cstring>"}},"required":["id","directoryUserId","group","teamId","overriddenByUser","overriddenByUserId","overriddenByUserIdentifier","enabled","createdAt","groupId"],"uniqueKey":"directory.items.[INDEX].groups.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"directory.items.[INDEX].groups","typeLabel":"object[]"},"licenses":{"description":"Licenses assigned by this user directory integration","type":"array","items":{"type":"object","properties":{"licenseId":{"type":"string","description":"Integration-provided license identifier","isRequired":true,"uniqueKey":"directory.items.[INDEX].licenses.items.[INDEX].licenseId","typeLabel":"string"},"licenseName":{"type":"string","description":"Synced license name, falling back to the integration identifier","isRequired":true,"uniqueKey":"directory.items.[INDEX].licenses.items.[INDEX].licenseName","typeLabel":"string"},"productId":{"oneOf":[{"type":"string","description":"Google Licensing API product identifier when applicable","isRequired":true,"uniqueKey":"directory.items.[INDEX].licenses.items.[INDEX].productId.oneOf.0","typeLabel":"string"},{"type":"null","description":"Google Licensing API product identifier when applicable","isRequired":true,"uniqueKey":"directory.items.[INDEX].licenses.items.[INDEX].productId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"directory.items.[INDEX].licenses.items.[INDEX].productId","typeLabel":"string | null"},"integrationPlatform":{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Source integration","x-extensible-enum":true,"isRequired":true,"uniqueKey":"directory.items.[INDEX].licenses.items.[INDEX].integrationPlatform","typeLabel":"enum\u003cstring>"}},"required":["licenseId","licenseName","productId","integrationPlatform"],"uniqueKey":"directory.items.[INDEX].licenses.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"directory.items.[INDEX].licenses","typeLabel":"object[]"},"onPremises":{"type":"boolean","description":"Whether the identity provider reports the user as synced from on-premises Active Directory","isRequired":true,"uniqueKey":"directory.items.[INDEX].onPremises","typeLabel":"boolean"},"groupContainmentEnabled":{"type":"boolean","description":"Whether all groups on this user allow containment","isRequired":true,"uniqueKey":"directory.items.[INDEX].groupContainmentEnabled","typeLabel":"boolean"},"groupChatOpsEnabled":{"type":"boolean","description":"Whether all groups on this user allow chat ops","isRequired":true,"uniqueKey":"directory.items.[INDEX].groupChatOpsEnabled","typeLabel":"boolean"},"groupSourceSystemUpdates":{"type":"boolean","description":"Whether all groups on this user allow outbound updates to the source product","isRequired":true,"uniqueKey":"directory.items.[INDEX].groupSourceSystemUpdates","typeLabel":"boolean"},"groupsSynced":{"type":"boolean","description":"Whether this user has had its first round of group checks run","isRequired":true,"uniqueKey":"directory.items.[INDEX].groupsSynced","typeLabel":"boolean"},"enabled":{"type":"boolean","description":"Whether the user account is enabled","uniqueKey":"directory.items.[INDEX].enabled","typeLabel":"boolean"},"directoryId":{"type":"string","description":"Directory-specific identifier for the user","uniqueKey":"directory.items.[INDEX].directoryId","typeLabel":"string"},"name":{"type":"string","description":"Full name of the user","uniqueKey":"directory.items.[INDEX].name","typeLabel":"string"},"phoneNumber":{"type":"string","description":"Phone number of the user","uniqueKey":"directory.items.[INDEX].phoneNumber","typeLabel":"string"},"previousPhoneNumber":{"type":"string","description":"Previous phone number if changed","uniqueKey":"directory.items.[INDEX].previousPhoneNumber","typeLabel":"string"},"title":{"type":"string","description":"Job title of the user","uniqueKey":"directory.items.[INDEX].title","typeLabel":"string"},"email":{"type":"string","description":"Email address of the user","uniqueKey":"directory.items.[INDEX].email","typeLabel":"string"},"vip":{"type":"boolean","description":"Whether the user is marked as VIP","uniqueKey":"directory.items.[INDEX].vip","typeLabel":"boolean"},"nhi":{"type":"boolean","description":"Whether the user is non-human identity (service account)","uniqueKey":"directory.items.[INDEX].nhi","typeLabel":"boolean"},"financial":{"type":"boolean","description":"Whether the user has financial access/permissions","uniqueKey":"directory.items.[INDEX].financial","typeLabel":"boolean"},"technical":{"type":"boolean","description":"Whether the user has technical access/permissions","uniqueKey":"directory.items.[INDEX].technical","typeLabel":"boolean"},"external":{"type":"boolean","description":"Whether the user is external","uniqueKey":"directory.items.[INDEX].external","typeLabel":"boolean"},"managerDirectoryId":{"type":"string","description":"Directory ID of the user's manager","uniqueKey":"directory.items.[INDEX].managerDirectoryId","typeLabel":"string"},"managerEmail":{"type":"string","description":"Email address of the user's manager","uniqueKey":"directory.items.[INDEX].managerEmail","typeLabel":"string"},"domain":{"type":"string","description":"Domain the user belongs to","uniqueKey":"directory.items.[INDEX].domain","typeLabel":"string"},"department":{"type":"string","description":"Department the user works in","uniqueKey":"directory.items.[INDEX].department","typeLabel":"string"},"canonicalId":{"oneOf":[{"type":"string","description":"When set, this row is a duplicate source; points at the canonical representative row id","uniqueKey":"directory.items.[INDEX].canonicalId.oneOf.0","typeLabel":"string"},{"type":"null","description":"When set, this row is a duplicate source; points at the canonical representative row id","uniqueKey":"directory.items.[INDEX].canonicalId.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalId","typeLabel":"string | null"},"canonicalClusterMemberCount":{"oneOf":[{"type":"number","description":"Child directory user rows in the same canonical cluster (canonical_id = root), excluding the root row; null when there are no children","uniqueKey":"directory.items.[INDEX].canonicalClusterMemberCount.oneOf.0","typeLabel":"number"},{"type":"null","description":"Child directory user rows in the same canonical cluster (canonical_id = root), excluding the root row; null when there are no children","uniqueKey":"directory.items.[INDEX].canonicalClusterMemberCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMemberCount","typeLabel":"number | null"},"canonicalClusterMembers":{"oneOf":[{"description":"Preview of other integration-backed rows in the same canonical cluster (at most five children when count exceeds five); null when none","example":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Directory user or endpoint id","isRequired":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].id","typeLabel":"string"},"displayLabel":{"type":"string","description":"Display label for the row","isRequired":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].displayLabel","typeLabel":"string"},"integrationId":{"oneOf":[{"type":"string","description":"Integration id for this source row","isRequired":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId.oneOf.0","typeLabel":"string"},{"type":"null","description":"Integration id for this source row","isRequired":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId","typeLabel":"string | null"},"integrationPlatform":{"oneOf":[{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true,"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform","typeLabel":"enum\u003cstring> | null"},"name":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].name.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].name.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].name","typeLabel":"string | null"},"username":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].username.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].username.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].username","typeLabel":"string | null"},"email":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].email.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].email.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].email","typeLabel":"string | null"},"additionalEmails":{"oneOf":[{"type":"array","items":{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.0","typeLabel":"string[]"},{"type":"null","items":{"type":"string"},"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails","typeLabel":"string[] | null"},"roles":{"oneOf":[{"type":"array","items":{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.0","typeLabel":"string[]"},{"type":"null","items":{"type":"string"},"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].roles","typeLabel":"string[] | null"},"title":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].title.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].title.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].title","typeLabel":"string | null"},"department":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].department.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].department.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].department","typeLabel":"string | null"},"managed":{"oneOf":[{"type":"boolean","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].managed.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].managed.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].managed","typeLabel":"boolean | null"},"enabled":{"oneOf":[{"type":"boolean","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].enabled.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].enabled.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].enabled","typeLabel":"boolean | null"},"createdAt":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt","typeLabel":"string | null"},"updatedAt":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt","typeLabel":"string | null"},"live":{"oneOf":[{"type":"boolean","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].live.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].live.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].live","typeLabel":"boolean | null"},"operatingSystem":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem","typeLabel":"string | null"},"privateIpAddress":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress","typeLabel":"string | null"},"publicIpAddress":{"oneOf":[{"type":"string","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress","typeLabel":"string | null"}},"required":["id","displayLabel","integrationId"],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0.items.[INDEX]","typeLabel":"object"},"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.0","typeLabel":"object[]"},{"description":"Preview of other integration-backed rows in the same canonical cluster (at most five children when count exceeds five); null when none","example":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"type":"null","items":{"type":"object","properties":{"id":{"type":"string","description":"Directory user or endpoint id"},"displayLabel":{"type":"string","description":"Display label for the row"},"integrationId":{"oneOf":[{"type":"string","description":"Integration id for this source row"},{"type":"null","description":"Integration id for this source row"}]},"integrationPlatform":{"oneOf":[{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true},{"type":"null","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true}]},"name":{"oneOf":[{"type":"string"},{"type":"null"}]},"username":{"oneOf":[{"type":"string"},{"type":"null"}]},"email":{"oneOf":[{"type":"string"},{"type":"null"}]},"additionalEmails":{"oneOf":[{"type":"array","items":{"type":"string"}},{"type":"null","items":{"type":"string"}}]},"roles":{"oneOf":[{"type":"array","items":{"type":"string"}},{"type":"null","items":{"type":"string"}}]},"title":{"oneOf":[{"type":"string"},{"type":"null"}]},"department":{"oneOf":[{"type":"string"},{"type":"null"}]},"managed":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"enabled":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"createdAt":{"oneOf":[{"type":"string"},{"type":"null"}]},"updatedAt":{"oneOf":[{"type":"string"},{"type":"null"}]},"live":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"operatingSystem":{"oneOf":[{"type":"string"},{"type":"null"}]},"privateIpAddress":{"oneOf":[{"type":"string"},{"type":"null"}]},"publicIpAddress":{"oneOf":[{"type":"string"},{"type":"null"}]}},"required":["id","displayLabel","integrationId"]},"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].canonicalClusterMembers","typeLabel":"object[] | null"},"roles":{"oneOf":[{"description":"Roles assigned to the user","type":"array","items":{"type":"string","uniqueKey":"directory.items.[INDEX].roles.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"directory.items.[INDEX].roles.oneOf.0","typeLabel":"string[]"},{"description":"Roles assigned to the user","type":"null","items":{"type":"string"},"uniqueKey":"directory.items.[INDEX].roles.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].roles","typeLabel":"string[] | null"},"lastCredentialExposure":{"oneOf":[{"type":"string","description":"Timestamp of the last credential exposure","uniqueKey":"directory.items.[INDEX].lastCredentialExposure.oneOf.0","typeLabel":"string"},{"type":"null","description":"Timestamp of the last credential exposure","uniqueKey":"directory.items.[INDEX].lastCredentialExposure.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].lastCredentialExposure","typeLabel":"string | null"},"lastCheckedForCredentialExposures":{"oneOf":[{"type":"string","description":"Timestamp when last checked for credential exposures","uniqueKey":"directory.items.[INDEX].lastCheckedForCredentialExposures.oneOf.0","typeLabel":"string"},{"type":"null","description":"Timestamp when last checked for credential exposures","uniqueKey":"directory.items.[INDEX].lastCheckedForCredentialExposures.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].lastCheckedForCredentialExposures","typeLabel":"string | null"},"needsChatOpsWelcome":{"type":"boolean","description":"Whether user needs to receive chat operations welcome message","uniqueKey":"directory.items.[INDEX].needsChatOpsWelcome","typeLabel":"boolean"},"contained":{"type":"boolean","description":"Whether the user is currently contained","uniqueKey":"directory.items.[INDEX].contained","typeLabel":"boolean"},"username":{"type":"string","description":"Username for the user account","uniqueKey":"directory.items.[INDEX].username","typeLabel":"string"},"smsConsentReceivedAt":{"oneOf":[{"type":"string","description":"Timestamp when SMS consent was received","uniqueKey":"directory.items.[INDEX].smsConsentReceivedAt.oneOf.0","typeLabel":"string"},{"type":"null","description":"Timestamp when SMS consent was received","uniqueKey":"directory.items.[INDEX].smsConsentReceivedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"directory.items.[INDEX].smsConsentReceivedAt","typeLabel":"string | null"},"smsInviteLastSentAt":{"type":"string","description":"Timestamp of last SMS invite sent","uniqueKey":"directory.items.[INDEX].smsInviteLastSentAt","typeLabel":"string"},"smsInviteOptOut":{"type":"boolean","description":"Whether user opted out of SMS invites","uniqueKey":"directory.items.[INDEX].smsInviteOptOut","typeLabel":"boolean"},"administrator":{"type":"boolean","description":"Whether the user has administrative privileges","uniqueKey":"directory.items.[INDEX].administrator","typeLabel":"boolean"},"updatedAt":{"type":"string","description":"Timestamp when the user was last updated","uniqueKey":"directory.items.[INDEX].updatedAt","typeLabel":"string"},"passwordLastChangedAt":{"type":"string","description":"Timestamp when password was last changed","uniqueKey":"directory.items.[INDEX].passwordLastChangedAt","typeLabel":"string"},"lastSignInAt":{"type":"string","description":"Timestamp of the user's last sign-in","uniqueKey":"directory.items.[INDEX].lastSignInAt","typeLabel":"string"},"raw":{"type":"object","description":"Raw data from the directory source","uniqueKey":"directory.items.[INDEX].raw","typeLabel":"object"},"managed":{"type":"boolean","description":"Whether the user is managed by an integration","uniqueKey":"directory.items.[INDEX].managed","typeLabel":"boolean"},"chatOpsOnboardingUser":{"type":"boolean","description":"Whether the user is in the chat ops onboarding group","uniqueKey":"directory.items.[INDEX].chatOpsOnboardingUser","typeLabel":"boolean"},"verifiedPhoneNumber":{"type":"string","description":"Verified phone number of the user","uniqueKey":"directory.items.[INDEX].verifiedPhoneNumber","typeLabel":"string"},"emailDirection":{"type":"string","enum":["sender","receiver"],"description":"Email direction when user is associated with an email detection","x-extensible-enum":true,"uniqueKey":"directory.items.[INDEX].emailDirection","typeLabel":"enum\u003cstring>"},"sourceDispositions":{"type":"array","description":"Actions the source product reported taking on this asset for the detection","items":{"type":"string","enum":["BLOCKED","QUARANTINED","KILLED","REMEDIATED","ISOLATED","PASSWORD_RESET","ACTION_FAILED"],"x-extensible-enum":true,"uniqueKey":"directory.items.[INDEX].sourceDispositions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"directory.items.[INDEX].sourceDispositions","typeLabel":"enum\u003cstring>[]"}},"required":["id","displayName","teamId","additionalEmails","allEmails","createdAt","integrationId","canonicalClusterEmails","credentialsExposed","numberCredentialExposures","containable","smsInviteAttempts","groups","licenses","onPremises","groupContainmentEnabled","groupChatOpsEnabled","groupSourceSystemUpdates","groupsSynced"],"uniqueKey":"directory.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"directory","typeLabel":"object[]"},"processes":{"description":"Array of process assets","type":"array","items":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"processes.items.[INDEX].id","typeLabel":"string"},"displayName":{"type":"string","isRequired":true,"uniqueKey":"processes.items.[INDEX].displayName","typeLabel":"string"},"teamId":{"type":"string","isRequired":true,"uniqueKey":"processes.items.[INDEX].teamId","typeLabel":"string"},"createdAt":{"type":"string","isRequired":true,"uniqueKey":"processes.items.[INDEX].createdAt","typeLabel":"string"},"sourceDispositions":{"type":"array","description":"Actions the source product reported taking on this asset for the detection","items":{"type":"string","enum":["BLOCKED","QUARANTINED","KILLED","REMEDIATED","ISOLATED","PASSWORD_RESET","ACTION_FAILED"],"x-extensible-enum":true,"uniqueKey":"processes.items.[INDEX].sourceDispositions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"processes.items.[INDEX].sourceDispositions","typeLabel":"enum\u003cstring>[]"},"command":{"type":"string","uniqueKey":"processes.items.[INDEX].command","typeLabel":"string"},"sha256":{"type":"string","uniqueKey":"processes.items.[INDEX].sha256","typeLabel":"string"},"sha1":{"type":"string","uniqueKey":"processes.items.[INDEX].sha1","typeLabel":"string"}},"required":["id","displayName","teamId","createdAt"],"uniqueKey":"processes.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"processes","typeLabel":"object[]"},"domains":{"description":"Array of domain assets","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the domain","isRequired":true,"uniqueKey":"domains.items.[INDEX].id","typeLabel":"string"},"displayName":{"type":"string","description":"Display name for the domain","isRequired":true,"uniqueKey":"domains.items.[INDEX].displayName","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this domain","isRequired":true,"uniqueKey":"domains.items.[INDEX].teamId","typeLabel":"string"},"name":{"type":"string","description":"Domain name","isRequired":true,"uniqueKey":"domains.items.[INDEX].name","typeLabel":"string"},"createdAt":{"type":"string","description":"Timestamp when the domain was created","isRequired":true,"uniqueKey":"domains.items.[INDEX].createdAt","typeLabel":"string"},"sourceDispositions":{"type":"array","description":"Actions the source product reported taking on this asset for the detection","items":{"type":"string","enum":["BLOCKED","QUARANTINED","KILLED","REMEDIATED","ISOLATED","PASSWORD_RESET","ACTION_FAILED"],"x-extensible-enum":true,"uniqueKey":"domains.items.[INDEX].sourceDispositions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"domains.items.[INDEX].sourceDispositions","typeLabel":"enum\u003cstring>[]"},"metadata":{"oneOf":[{"type":"object","description":"Tranco rank and CZDS first-seen stored on this domain","required":["registrableDomain","isSubdomain","popularity","registrableDomainPopularity","popularityFetchedAt","czds"],"properties":{"registrableDomain":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomain.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomain.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomain","typeLabel":"string | null"},"isSubdomain":{"type":"boolean","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.isSubdomain","typeLabel":"boolean"},"popularity":{"oneOf":[{"type":"object","required":["rank","sourceDatasetId"],"properties":{"rank":{"type":"number","description":"Domain popularity rank","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularity.oneOf.0.rank","typeLabel":"number"},"sourceDatasetId":{"type":"string","description":"Source dataset identifier used for the ranking","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularity.oneOf.0.sourceDatasetId","typeLabel":"string"}},"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularity.oneOf.0","typeLabel":"object"},{"type":"null","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularity.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularity","typeLabel":"object | null"},"registrableDomainPopularity":{"oneOf":[{"type":"object","required":["rank","sourceDatasetId"],"properties":{"rank":{"type":"number","description":"Domain popularity rank","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomainPopularity.oneOf.0.rank","typeLabel":"number"},"sourceDatasetId":{"type":"string","description":"Source dataset identifier used for the ranking","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomainPopularity.oneOf.0.sourceDatasetId","typeLabel":"string"}},"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomainPopularity.oneOf.0","typeLabel":"object"},{"type":"null","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomainPopularity.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.registrableDomainPopularity","typeLabel":"object | null"},"popularityFetchedAt":{"oneOf":[{"type":"string","description":"When Tranco was last read. Null when that read failed.","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularityFetchedAt.oneOf.0","typeLabel":"string"},{"type":"null","description":"When Tranco was last read. Null when that read failed.","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularityFetchedAt.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.popularityFetchedAt","typeLabel":"string | null"},"czds":{"oneOf":[{"type":"object","description":"Null when CZDS enrichment is disabled.","required":["status","firstSeen","fetchedAt"],"properties":{"status":{"type":"string","enum":["found","absent","unsupported_tld","not_registrable","error","pending"],"description":"found is a stored first-seen date. absent, error, and pending are retried. unsupported_tld and not_registrable are not looked up.","x-extensible-enum":true,"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds.oneOf.0.status","typeLabel":"enum\u003cstring>"},"firstSeen":{"oneOf":[{"type":"string","description":"Earliest zone-file observation. Set only when status is found. This is not the registration date.","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds.oneOf.0.firstSeen.oneOf.0","typeLabel":"string"},{"type":"null","description":"Earliest zone-file observation. Set only when status is found. This is not the registration date.","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds.oneOf.0.firstSeen.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds.oneOf.0.firstSeen","typeLabel":"string | null"},"fetchedAt":{"type":"string","description":"When this CZDS answer was recorded","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds.oneOf.0.fetchedAt","typeLabel":"string"}},"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds.oneOf.0","typeLabel":"object"},{"type":"null","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.czds","typeLabel":"object | null"},"hostingProvider":{"oneOf":[{"type":"string","description":"Public Suffix List PRIVATE suffix (cloud hosting) the hostname sits under. Null for ICANN-only hostnames; absent until the row is re-enriched.","uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.hostingProvider.oneOf.0","typeLabel":"string"},{"type":"null","description":"Public Suffix List PRIVATE suffix (cloud hosting) the hostname sits under. Null for ICANN-only hostnames; absent until the row is re-enriched.","uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.hostingProvider.oneOf.1","typeLabel":"null"}],"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.hostingProvider","typeLabel":"string | null"},"ownedByTeam":{"oneOf":[{"type":"object","description":"Set when the team's identity directory proves it owns this tenant hostname","required":["source","tenant"],"properties":{"source":{"type":"string","enum":["microsoft_tenant"],"description":"microsoft_tenant: the team directory has addresses on \u003ctenant>.onmicrosoft.com","x-extensible-enum":true,"isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.ownedByTeam.oneOf.0.source","typeLabel":"enum\u003cstring>"},"tenant":{"type":"string","description":"Tenant label the hostname belongs to","isRequired":true,"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.ownedByTeam.oneOf.0.tenant","typeLabel":"string"}},"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.ownedByTeam.oneOf.0","typeLabel":"object"},{"type":"null","uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.ownedByTeam.oneOf.1","typeLabel":"null"}],"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0.ownedByTeam","typeLabel":"object | null"}},"uniqueKey":"domains.items.[INDEX].metadata.oneOf.0","typeLabel":"object"},{"type":"null","uniqueKey":"domains.items.[INDEX].metadata.oneOf.1","typeLabel":"null"}],"uniqueKey":"domains.items.[INDEX].metadata","typeLabel":"object | null"}},"required":["id","displayName","teamId","name","createdAt"],"uniqueKey":"domains.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"domains","typeLabel":"object[]"},"locations":{"description":"Array of location assets","type":"array","items":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"locations.items.[INDEX].id","typeLabel":"string"},"displayName":{"type":"string","isRequired":true,"uniqueKey":"locations.items.[INDEX].displayName","typeLabel":"string"},"teamId":{"type":"string","isRequired":true,"uniqueKey":"locations.items.[INDEX].teamId","typeLabel":"string"},"createdAt":{"type":"string","isRequired":true,"uniqueKey":"locations.items.[INDEX].createdAt","typeLabel":"string"},"lat":{"type":"string","uniqueKey":"locations.items.[INDEX].lat","typeLabel":"string"},"lon":{"type":"string","uniqueKey":"locations.items.[INDEX].lon","typeLabel":"string"},"city":{"type":"string","uniqueKey":"locations.items.[INDEX].city","typeLabel":"string"},"state":{"type":"string","uniqueKey":"locations.items.[INDEX].state","typeLabel":"string"},"country":{"type":"string","uniqueKey":"locations.items.[INDEX].country","typeLabel":"string"},"countryCode":{"type":"string","uniqueKey":"locations.items.[INDEX].countryCode","typeLabel":"string"},"continent":{"type":"string","uniqueKey":"locations.items.[INDEX].continent","typeLabel":"string"},"continentCode":{"type":"string","uniqueKey":"locations.items.[INDEX].continentCode","typeLabel":"string"},"mapLat":{"oneOf":[{"type":"string","description":"Latitude for map display. Uses the stored latitude, falling back to the geolocation of IPs linked to this location on the detail endpoint.","uniqueKey":"locations.items.[INDEX].mapLat.oneOf.0","typeLabel":"string"},{"type":"null","description":"Latitude for map display. Uses the stored latitude, falling back to the geolocation of IPs linked to this location on the detail endpoint.","uniqueKey":"locations.items.[INDEX].mapLat.oneOf.1","typeLabel":"null"}],"uniqueKey":"locations.items.[INDEX].mapLat","typeLabel":"string | null"},"mapLon":{"oneOf":[{"type":"string","description":"Longitude for map display. Uses the stored longitude, falling back to the geolocation of IPs linked to this location on the detail endpoint.","uniqueKey":"locations.items.[INDEX].mapLon.oneOf.0","typeLabel":"string"},{"type":"null","description":"Longitude for map display. Uses the stored longitude, falling back to the geolocation of IPs linked to this location on the detail endpoint.","uniqueKey":"locations.items.[INDEX].mapLon.oneOf.1","typeLabel":"null"}],"uniqueKey":"locations.items.[INDEX].mapLon","typeLabel":"string | null"}},"required":["id","displayName","teamId","createdAt"],"uniqueKey":"locations.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"locations","typeLabel":"object[]"},"files":{"description":"Array of file assets","type":"array","items":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].id","typeLabel":"string"},"displayName":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].displayName","typeLabel":"string"},"teamId":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].teamId","typeLabel":"string"},"createdAt":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].createdAt","typeLabel":"string"},"updatedAt":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].updatedAt","typeLabel":"string"},"fileRisk":{"type":"string","enum":["BENIGN","MALWARE","LATE_STAGE","NUISANCE","LIVE_OFF_THE_LAND","REMOTE_MANAGEMENT","UNKNOWN"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"files.items.[INDEX].fileRisk","typeLabel":"enum\u003cstring>"},"enrichedViaIntegration":{"type":"boolean","isRequired":true,"uniqueKey":"files.items.[INDEX].enrichedViaIntegration","typeLabel":"boolean"},"name":{"type":"string","uniqueKey":"files.items.[INDEX].name","typeLabel":"string"},"path":{"type":"string","uniqueKey":"files.items.[INDEX].path","typeLabel":"string"},"sha256":{"type":"string","uniqueKey":"files.items.[INDEX].sha256","typeLabel":"string"},"sha1":{"type":"string","uniqueKey":"files.items.[INDEX].sha1","typeLabel":"string"},"toolName":{"type":"string","uniqueKey":"files.items.[INDEX].toolName","typeLabel":"string"},"lastEnrichedAt":{"oneOf":[{"type":"string","uniqueKey":"files.items.[INDEX].lastEnrichedAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"files.items.[INDEX].lastEnrichedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"files.items.[INDEX].lastEnrichedAt","typeLabel":"string | null"},"nameWithPath":{"type":"string","uniqueKey":"files.items.[INDEX].nameWithPath","typeLabel":"string"},"metadata":{"type":"object","properties":{"threatNames":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.threatNames.items.[INDEX].name","typeLabel":"string"},"engine":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.threatNames.items.[INDEX].engine","typeLabel":"string"},"excluded":{"type":"boolean","isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.threatNames.items.[INDEX].excluded","typeLabel":"boolean"},"matchedFileRiskRules":{"type":"array","items":{"type":"string","uniqueKey":"files.items.[INDEX].metadata.threatNames.items.[INDEX].matchedFileRiskRules.items.[INDEX]","typeLabel":"string"},"uniqueKey":"files.items.[INDEX].metadata.threatNames.items.[INDEX].matchedFileRiskRules","typeLabel":"string[]"}},"required":["name","engine","excluded"],"uniqueKey":"files.items.[INDEX].metadata.threatNames.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.threatNames","typeLabel":"object[]"},"versionInfo":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.versionInfo.items.[INDEX].name","typeLabel":"string"},"value":{"type":"string","isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.versionInfo.items.[INDEX].value","typeLabel":"string"}},"required":["name","value"],"uniqueKey":"files.items.[INDEX].metadata.versionInfo.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.versionInfo","typeLabel":"object[]"},"proposedFileNames":{"type":"array","items":{"type":"string","uniqueKey":"files.items.[INDEX].metadata.proposedFileNames.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.proposedFileNames","typeLabel":"string[]"},"fileNameCatalogMatches":{"type":"array","items":{"type":"string","uniqueKey":"files.items.[INDEX].metadata.fileNameCatalogMatches.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"files.items.[INDEX].metadata.fileNameCatalogMatches","typeLabel":"string[]"},"lastScanTime":{"type":"string","uniqueKey":"files.items.[INDEX].metadata.lastScanTime","typeLabel":"string"},"story":{"type":"string","uniqueKey":"files.items.[INDEX].metadata.story","typeLabel":"string"}},"required":["threatNames","versionInfo","proposedFileNames","fileNameCatalogMatches"],"uniqueKey":"files.items.[INDEX].metadata","typeLabel":"object"},"contained":{"type":"boolean","uniqueKey":"files.items.[INDEX].contained","typeLabel":"boolean"},"sourceDispositions":{"type":"array","description":"Actions the source product reported taking on this asset for the detection","items":{"type":"string","enum":["BLOCKED","QUARANTINED","KILLED","REMEDIATED","ISOLATED","PASSWORD_RESET","ACTION_FAILED"],"x-extensible-enum":true,"uniqueKey":"files.items.[INDEX].sourceDispositions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"files.items.[INDEX].sourceDispositions","typeLabel":"enum\u003cstring>[]"}},"required":["id","displayName","teamId","createdAt","updatedAt","fileRisk","enrichedViaIntegration"],"uniqueKey":"files.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"files","typeLabel":"object[]"},"ips":{"description":"Array of IP address assets","type":"array","items":{"type":"object","properties":{"displayName":{"type":"string","description":"Display name for the IP address","isRequired":true,"uniqueKey":"ips.items.[INDEX].displayName","typeLabel":"string"},"id":{"type":"string","description":"Unique identifier for the IP address","isRequired":true,"uniqueKey":"ips.items.[INDEX].id","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this IP address","isRequired":true,"uniqueKey":"ips.items.[INDEX].teamId","typeLabel":"string"},"createdAt":{"type":"string","description":"Timestamp when the IP was created","isRequired":true,"uniqueKey":"ips.items.[INDEX].createdAt","typeLabel":"string"},"updatedAt":{"type":"string","description":"Timestamp when the IP was last updated","isRequired":true,"uniqueKey":"ips.items.[INDEX].updatedAt","typeLabel":"string"},"metadataLastFetchedAt":{"type":"string","description":"Timestamp when metadata was last fetched","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadataLastFetchedAt","typeLabel":"string"},"sourceDispositions":{"type":"array","description":"Actions the source product reported taking on this asset for the detection","items":{"type":"string","enum":["BLOCKED","QUARANTINED","KILLED","REMEDIATED","ISOLATED","PASSWORD_RESET","ACTION_FAILED"],"x-extensible-enum":true,"uniqueKey":"ips.items.[INDEX].sourceDispositions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"ips.items.[INDEX].sourceDispositions","typeLabel":"enum\u003cstring>[]"},"ipv4":{"type":"string","description":"IPv4 address","uniqueKey":"ips.items.[INDEX].ipv4","typeLabel":"string"},"ipv6":{"type":"string","description":"IPv6 address","uniqueKey":"ips.items.[INDEX].ipv6","typeLabel":"string"},"metadata":{"type":"object","description":"Enriched metadata about the IP address","required":["ofac","adversarial"],"properties":{"ofac":{"type":"boolean","description":"Whether IP is on OFAC sanctions list","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.ofac","typeLabel":"boolean"},"adversarial":{"type":"boolean","description":"Whether IP is flagged as adversarial/malicious","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.adversarial","typeLabel":"boolean"},"ip":{"type":"string","description":"IP address","uniqueKey":"ips.items.[INDEX].metadata.ip","typeLabel":"string"},"hostname":{"type":"string","description":"Hostname associated with the IP","uniqueKey":"ips.items.[INDEX].metadata.hostname","typeLabel":"string"},"city":{"type":"string","description":"City where IP is located","uniqueKey":"ips.items.[INDEX].metadata.city","typeLabel":"string"},"region":{"type":"string","description":"Region where IP is located","uniqueKey":"ips.items.[INDEX].metadata.region","typeLabel":"string"},"country":{"type":"string","description":"Country where IP is located","uniqueKey":"ips.items.[INDEX].metadata.country","typeLabel":"string"},"loc":{"type":"string","description":"Geographic coordinates of IP location","uniqueKey":"ips.items.[INDEX].metadata.loc","typeLabel":"string"},"postal":{"type":"string","description":"Postal code of IP location","uniqueKey":"ips.items.[INDEX].metadata.postal","typeLabel":"string"},"timezone":{"type":"string","description":"Timezone of IP location","uniqueKey":"ips.items.[INDEX].metadata.timezone","typeLabel":"string"},"org":{"type":"string","description":"Organization that owns the IP","uniqueKey":"ips.items.[INDEX].metadata.org","typeLabel":"string"},"asn":{"type":"object","description":"Autonomous System Number information","required":["asn","name","domain","type"],"properties":{"asn":{"type":"string","description":"Autonomous System Number","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.asn.asn","typeLabel":"string"},"name":{"type":"string","description":"Name of the ASN organization","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.asn.name","typeLabel":"string"},"domain":{"type":"string","description":"Domain associated with the ASN","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.asn.domain","typeLabel":"string"},"type":{"type":"string","description":"Type of ASN organization","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.asn.type","typeLabel":"string"},"route":{"type":"string","description":"Network route for the ASN","uniqueKey":"ips.items.[INDEX].metadata.asn.route","typeLabel":"string"}},"uniqueKey":"ips.items.[INDEX].metadata.asn","typeLabel":"object"},"company":{"type":"object","description":"Company information for the IP","required":["name","domain","type"],"properties":{"name":{"type":"string","description":"Company name","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.company.name","typeLabel":"string"},"domain":{"type":"string","description":"Company domain","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.company.domain","typeLabel":"string"},"type":{"type":"string","description":"Company type","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.company.type","typeLabel":"string"}},"uniqueKey":"ips.items.[INDEX].metadata.company","typeLabel":"object"},"privacy":{"type":"object","description":"Privacy/anonymization service information","required":["vpn","proxy","tor","relay","hosting","service"],"properties":{"vpn":{"type":"boolean","description":"Whether IP is associated with VPN service","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.privacy.vpn","typeLabel":"boolean"},"proxy":{"type":"boolean","description":"Whether IP is associated with proxy service","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.privacy.proxy","typeLabel":"boolean"},"tor":{"type":"boolean","description":"Whether IP is associated with Tor network","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.privacy.tor","typeLabel":"boolean"},"relay":{"type":"boolean","description":"Whether IP is associated with relay service","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.privacy.relay","typeLabel":"boolean"},"hosting":{"type":"boolean","description":"Whether IP is associated with hosting service","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.privacy.hosting","typeLabel":"boolean"},"service":{"type":"string","description":"Type of privacy service detected","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.privacy.service","typeLabel":"string"},"residentialProxy":{"type":"boolean","description":"Whether IP is associated with a residential proxy","uniqueKey":"ips.items.[INDEX].metadata.privacy.residentialProxy","typeLabel":"boolean"},"lastSeen":{"type":"string","description":"Date the IP was last seen as anonymous (YYYY-MM-DD)","uniqueKey":"ips.items.[INDEX].metadata.privacy.lastSeen","typeLabel":"string"},"percentDaysSeen":{"type":"number","description":"Percentage of days the IP was seen as anonymous in the observation window","uniqueKey":"ips.items.[INDEX].metadata.privacy.percentDaysSeen","typeLabel":"number"}},"uniqueKey":"ips.items.[INDEX].metadata.privacy","typeLabel":"object"},"abuse":{"type":"object","description":"Abuse contact information","required":["address","country","email","name","network","phone"],"properties":{"address":{"type":"string","description":"Abuse contact address","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.abuse.address","typeLabel":"string"},"country":{"type":"string","description":"Country for abuse contact","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.abuse.country","typeLabel":"string"},"email":{"type":"string","description":"Abuse contact email address","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.abuse.email","typeLabel":"string"},"name":{"type":"string","description":"Abuse contact name","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.abuse.name","typeLabel":"string"},"network":{"type":"string","description":"Network associated with abuse contact","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.abuse.network","typeLabel":"string"},"phone":{"type":"string","description":"Abuse contact phone number","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.abuse.phone","typeLabel":"string"},"ofac":{"type":"boolean","description":"Whether IP is on OFAC sanctions list","uniqueKey":"ips.items.[INDEX].metadata.abuse.ofac","typeLabel":"boolean"},"adversarial":{"type":"boolean","description":"Whether IP is flagged as adversarial","uniqueKey":"ips.items.[INDEX].metadata.abuse.adversarial","typeLabel":"boolean"}},"uniqueKey":"ips.items.[INDEX].metadata.abuse","typeLabel":"object"},"domains":{"type":"object","description":"Domains hosted on this IP","required":["ip","total","domains"],"properties":{"ip":{"type":"string","description":"IP address for domain lookup","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.domains.ip","typeLabel":"string"},"total":{"type":"number","description":"Total number of domains hosted on this IP","isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.domains.total","typeLabel":"number"},"domains":{"description":"List of domains hosted on this IP","type":"array","items":{"type":"string","uniqueKey":"ips.items.[INDEX].metadata.domains.domains.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"ips.items.[INDEX].metadata.domains.domains","typeLabel":"string[]"}},"uniqueKey":"ips.items.[INDEX].metadata.domains","typeLabel":"object"},"isAnycast":{"type":"boolean","description":"Whether the IP is anycast","uniqueKey":"ips.items.[INDEX].metadata.isAnycast","typeLabel":"boolean"},"isMobile":{"type":"boolean","description":"Whether the IP is a mobile connection","uniqueKey":"ips.items.[INDEX].metadata.isMobile","typeLabel":"boolean"},"isSatellite":{"type":"boolean","description":"Whether the IP is a satellite connection","uniqueKey":"ips.items.[INDEX].metadata.isSatellite","typeLabel":"boolean"}},"uniqueKey":"ips.items.[INDEX].metadata","typeLabel":"object"},"locationId":{"type":"string","description":"Associated location ID","uniqueKey":"ips.items.[INDEX].locationId","typeLabel":"string"}},"required":["displayName","id","teamId","createdAt","updatedAt","metadataLastFetchedAt"],"uniqueKey":"ips.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"ips","typeLabel":"object[]"},"userAgents":{"description":"Array of user agent assets","type":"array","items":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"userAgents.items.[INDEX].id","typeLabel":"string"},"userAgent":{"type":"string","isRequired":true,"uniqueKey":"userAgents.items.[INDEX].userAgent","typeLabel":"string"},"teamId":{"type":"string","isRequired":true,"uniqueKey":"userAgents.items.[INDEX].teamId","typeLabel":"string"},"createdAt":{"type":"string","isRequired":true,"uniqueKey":"userAgents.items.[INDEX].createdAt","typeLabel":"string"},"displayName":{"type":"string","isRequired":true,"uniqueKey":"userAgents.items.[INDEX].displayName","typeLabel":"string"},"userAgentAlt":{"type":"string","uniqueKey":"userAgents.items.[INDEX].userAgentAlt","typeLabel":"string"},"browserName":{"type":"string","uniqueKey":"userAgents.items.[INDEX].browserName","typeLabel":"string"},"browserVersion":{"type":"string","uniqueKey":"userAgents.items.[INDEX].browserVersion","typeLabel":"string"},"browserMajorVersion":{"type":"string","uniqueKey":"userAgents.items.[INDEX].browserMajorVersion","typeLabel":"string"},"cpuArchitecture":{"type":"string","uniqueKey":"userAgents.items.[INDEX].cpuArchitecture","typeLabel":"string"},"deviceModel":{"type":"string","uniqueKey":"userAgents.items.[INDEX].deviceModel","typeLabel":"string"},"deviceVendor":{"type":"string","uniqueKey":"userAgents.items.[INDEX].deviceVendor","typeLabel":"string"},"engineName":{"type":"string","uniqueKey":"userAgents.items.[INDEX].engineName","typeLabel":"string"},"engineVersion":{"type":"string","uniqueKey":"userAgents.items.[INDEX].engineVersion","typeLabel":"string"},"osName":{"type":"string","uniqueKey":"userAgents.items.[INDEX].osName","typeLabel":"string"},"osVersion":{"type":"string","uniqueKey":"userAgents.items.[INDEX].osVersion","typeLabel":"string"}},"required":["id","userAgent","teamId","createdAt","displayName"],"uniqueKey":"userAgents.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"userAgents","typeLabel":"object[]"}},"required":["endpoints","directory","processes","domains","locations","files","ips","userAgents"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"endpoints":[{"id":"\u003cstring>","displayName":"\u003cstring>","teamId":"\u003cstring>","hva":true,"createdAt":"\u003cstring>","integrationId":"\u003cstring>","contained":true,"workstation":true,"server":true,"mobile":true,"domainController":true,"groups":[{"id":"\u003cstring>","endpointId":"\u003cstring>","group":"\u003cstring>","teamId":"\u003cstring>","enabled":true,"createdAt":"\u003cstring>","overriddenByUser":true,"groupId":"\u003cstring>","overriddenByUserId":"\u003cstring>","overriddenByUserIdentifier":"\u003cstring>","groupName":"\u003cstring>","groupSlug":"\u003cstring>","groupContainmentEnabled":true,"groupChatOpsEnabled":true,"groupSourceSystemUpdates":true,"groupAlwaysNotify":true,"groupIcon":"bot","groupRuleSearch":"\u003cstring>","groupRuleSearchField":"\u003cstring>","groupRuleSearchType":"text"}],"groupContainmentEnabled":true,"groupChatOpsEnabled":true,"groupSourceSystemUpdates":true,"groupsSynced":true,"sourceDispositions":["BLOCKED"],"edrSourceId":"\u003cstring>","mdmSourceId":"\u003cstring>","name":"\u003cstring>","hvaOverriddenByUser":true,"privateIpAddress":"\u003cstring>","live":true,"operatingSystem":"\u003cstring>","operatingSystemCategory":"Windows","canonicalId":"\u003cstring>","canonicalClusterMemberCount":123,"canonicalClusterMembers":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"managed":true,"publicIpAddress":"\u003cstring>","lastSeenAt":"\u003cstring>","updatedAt":"\u003cstring>","raw":{},"lockPin":"\u003cstring>"}],"directory":[{"id":"\u003cstring>","displayName":"\u003cstring>","teamId":"\u003cstring>","additionalEmails":["\u003cstring>"],"allEmails":["\u003cstring>"],"createdAt":"\u003cstring>","integrationId":"\u003cstring>","canonicalClusterEmails":["\u003cstring>"],"credentialsExposed":true,"numberCredentialExposures":123,"containable":true,"smsInviteAttempts":123,"groups":[{"id":"\u003cstring>","directoryUserId":"\u003cstring>","group":"\u003cstring>","teamId":"\u003cstring>","overriddenByUser":true,"overriddenByUserId":"\u003cstring>","overriddenByUserIdentifier":"\u003cstring>","enabled":true,"createdAt":"\u003cstring>","groupId":"\u003cstring>","groupName":"\u003cstring>","groupSlug":"\u003cstring>","groupContainmentEnabled":true,"groupChatOpsEnabled":true,"groupSourceSystemUpdates":true,"groupAlwaysNotify":true,"groupIcon":"bot","groupRuleSearch":"\u003cstring>","groupRuleSearchField":"\u003cstring>","groupRuleSearchType":"text"}],"licenses":[{"licenseId":"\u003cstring>","licenseName":"\u003cstring>","productId":"\u003cstring>","integrationPlatform":"acronis"}],"onPremises":true,"groupContainmentEnabled":true,"groupChatOpsEnabled":true,"groupSourceSystemUpdates":true,"groupsSynced":true,"enabled":true,"directoryId":"\u003cstring>","name":"\u003cstring>","phoneNumber":"\u003cstring>","previousPhoneNumber":"\u003cstring>","title":"\u003cstring>","email":"\u003cstring>","vip":true,"nhi":true,"financial":true,"technical":true,"external":true,"managerDirectoryId":"\u003cstring>","managerEmail":"\u003cstring>","domain":"\u003cstring>","department":"\u003cstring>","canonicalId":"\u003cstring>","canonicalClusterMemberCount":123,"canonicalClusterMembers":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"roles":["\u003cstring>"],"lastCredentialExposure":"\u003cstring>","lastCheckedForCredentialExposures":"\u003cstring>","needsChatOpsWelcome":true,"contained":true,"username":"\u003cstring>","smsConsentReceivedAt":"\u003cstring>","smsInviteLastSentAt":"\u003cstring>","smsInviteOptOut":true,"administrator":true,"updatedAt":"\u003cstring>","passwordLastChangedAt":"\u003cstring>","lastSignInAt":"\u003cstring>","raw":{},"managed":true,"chatOpsOnboardingUser":true,"verifiedPhoneNumber":"\u003cstring>","emailDirection":"sender","sourceDispositions":["BLOCKED"]}],"processes":[{"id":"\u003cstring>","displayName":"\u003cstring>","teamId":"\u003cstring>","createdAt":"\u003cstring>","sourceDispositions":["BLOCKED"],"command":"\u003cstring>","sha256":"\u003cstring>","sha1":"\u003cstring>"}],"domains":[{"id":"\u003cstring>","displayName":"\u003cstring>","teamId":"\u003cstring>","name":"\u003cstring>","createdAt":"\u003cstring>","sourceDispositions":["BLOCKED"],"metadata":{"registrableDomain":"\u003cstring>","isSubdomain":true,"popularity":{"rank":123,"sourceDatasetId":"\u003cstring>"},"registrableDomainPopularity":{"rank":123,"sourceDatasetId":"\u003cstring>"},"popularityFetchedAt":"\u003cstring>","czds":{"status":"found","firstSeen":"\u003cstring>","fetchedAt":"\u003cstring>"},"hostingProvider":"\u003cstring>","ownedByTeam":{"source":"microsoft_tenant","tenant":"\u003cstring>"}}}],"locations":[{"id":"\u003cstring>","displayName":"\u003cstring>","teamId":"\u003cstring>","createdAt":"\u003cstring>","lat":"\u003cstring>","lon":"\u003cstring>","city":"\u003cstring>","state":"\u003cstring>","country":"\u003cstring>","countryCode":"\u003cstring>","continent":"\u003cstring>","continentCode":"\u003cstring>","mapLat":"\u003cstring>","mapLon":"\u003cstring>"}],"files":[{"id":"\u003cstring>","displayName":"\u003cstring>","teamId":"\u003cstring>","createdAt":"\u003cstring>","updatedAt":"\u003cstring>","fileRisk":"BENIGN","enrichedViaIntegration":true,"name":"\u003cstring>","path":"\u003cstring>","sha256":"\u003cstring>","sha1":"\u003cstring>","toolName":"\u003cstring>","lastEnrichedAt":"\u003cstring>","nameWithPath":"\u003cstring>","metadata":{"threatNames":[{"name":"\u003cstring>","engine":"\u003cstring>","excluded":true,"matchedFileRiskRules":["\u003cstring>"]}],"versionInfo":[{"name":"\u003cstring>","value":"\u003cstring>"}],"proposedFileNames":["\u003cstring>"],"fileNameCatalogMatches":["\u003cstring>"],"lastScanTime":"\u003cstring>","story":"\u003cstring>"},"contained":true,"sourceDispositions":["BLOCKED"]}],"ips":[{"displayName":"\u003cstring>","id":"\u003cstring>","teamId":"\u003cstring>","createdAt":"\u003cstring>","updatedAt":"\u003cstring>","metadataLastFetchedAt":"\u003cstring>","sourceDispositions":["BLOCKED"],"ipv4":"\u003cstring>","ipv6":"\u003cstring>","metadata":{"ofac":true,"adversarial":true,"ip":"\u003cstring>","hostname":"\u003cstring>","city":"\u003cstring>","region":"\u003cstring>","country":"\u003cstring>","loc":"\u003cstring>","postal":"\u003cstring>","timezone":"\u003cstring>","org":"\u003cstring>","asn":{"asn":"\u003cstring>","name":"\u003cstring>","domain":"\u003cstring>","type":"\u003cstring>","route":"\u003cstring>"},"company":{"name":"\u003cstring>","domain":"\u003cstring>","type":"\u003cstring>"},"privacy":{"vpn":true,"proxy":true,"tor":true,"relay":true,"hosting":true,"service":"\u003cstring>","residentialProxy":true,"lastSeen":"\u003cstring>","percentDaysSeen":123},"abuse":{"address":"\u003cstring>","country":"\u003cstring>","email":"\u003cstring>","name":"\u003cstring>","network":"\u003cstring>","phone":"\u003cstring>","ofac":true,"adversarial":true},"domains":{"ip":"\u003cstring>","total":123,"domains":["\u003cstring>"]},"isAnycast":true,"isMobile":true,"isSatellite":true},"locationId":"\u003cstring>"}],"userAgents":[{"id":"\u003cstring>","userAgent":"\u003cstring>","teamId":"\u003cstring>","createdAt":"\u003cstring>","displayName":"\u003cstring>","userAgentAlt":"\u003cstring>","browserName":"\u003cstring>","browserVersion":"\u003cstring>","browserMajorVersion":"\u003cstring>","cpuArchitecture":"\u003cstring>","deviceModel":"\u003cstring>","deviceVendor":"\u003cstring>","engineName":"\u003cstring>","engineVersion":"\u003cstring>","osName":"\u003cstring>","osVersion":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"},"90499138-8c62-4c59-be8d-19ba22755d73":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"statusCode":{"type":"number","isRequired":true,"uniqueKey":"statusCode","typeLabel":"number"},"code":{"type":"string","description":"Stable machine-readable error code. Clients should branch and translate on this instead of `message`.","uniqueKey":"code","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the message for `code`.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"params.additionalProperties","typeLabel":"string | number | boolean | null"},"uniqueKey":"params","typeLabel":"object"},"validationErrors":{"description":"Per-property failures when `code` is `VALIDATION_FAILED` from request validation.","type":"array","items":{"type":"object","properties":{"property":{"type":"string","description":"Dotted path of the invalid property.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].property","typeLabel":"string"},"constraint":{"type":"string","description":"class-validator constraint name; clients translate `errors:validation.\u003cconstraint>`.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].constraint","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the constraint message.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties","typeLabel":"string | number | boolean | null"},"isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].params","typeLabel":"object"},"code":{"type":"string","description":"Catalog code overriding the constraint translation.","uniqueKey":"validationErrors.items.[INDEX].code","typeLabel":"string"}},"required":["property","constraint","params"],"uniqueKey":"validationErrors.items.[INDEX]","typeLabel":"object"},"uniqueKey":"validationErrors","typeLabel":"object[]"}},"required":["message","statusCode"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"message":"\u003cstring>","statusCode":123,"code":"\u003cstring>","params":{},"validationErrors":[{"property":"\u003cstring>","constraint":"\u003cstring>","params":{},"code":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"9797368a-29f2-470d-bde4-a960d3ea2eff":{"bearer":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"}}},"servers":{"687faaa7-d478-42a7-8b2f-e3bf1c3d4068":{"url":"https://api.wirespeed.co"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"bearer","name":"Authorization"}],"title":"bearer"}]},"originalFileLocation":"https://api.wirespeed.co/v1/openapi.json"},"subdomain":"wirespeed","siteName":"Wirespeed","title":"Get all assets for a case - Wirespeed","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{"en":{"href":"/api-reference/asset/get-all-assets-for-a-case","matchLevel":0},"fr":{"href":"/api-reference/asset/get-all-assets-for-a-case","matchLevel":0},"de":{"href":"/api-reference/asset/get-all-assets-for-a-case","matchLevel":0}}},"lastModified":"2026-11-06T19:45:29.711Z","originalFileLocation":"api-reference/asset/get-all-assets-for-a-case.mdx","locale":"en"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"application-name\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Get all assets for a case - Wirespeed\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Wirespeed\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Asset\u0026amp;title=Get+all+assets+for+a+case\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=d7a87d3dd7e39b6d39f835dc4a73130a8cdb982628e141fe2772bc800426f398\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Get all assets for a case - Wirespeed\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Asset\u0026amp;title=Get+all+assets+for+a+case\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=d7a87d3dd7e39b6d39f835dc4a73130a8cdb982628e141fe2772bc800426f398\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#8B5CF6\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/asset/get-all-assets-for-a-case.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.wirespeed.co/#organization\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.wirespeed.co#website\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case#webpage\",\"url\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case\",\"name\":\"Get all assets for a case\",\"dateModified\":\"2026-11-06T19:45:29.711Z\",\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"},\"breadcrumb\":{\"@id\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Endpoints\",\"item\":\"https://docs.wirespeed.co/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Get all assets for a case\",\"item\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case#apireference\",\"headline\":\"Get all assets for a case\",\"name\":\"Get all assets for a case\",\"url\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case\",\"mainEntityOfPage\":{\"@id\":\"https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case#webpage\"},\"dateModified\":\"2026-11-06T19:45:29.711Z\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Wirespeed\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Wirespeed","nav":{"global":null,"languages":[{"language":"en","default":true,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/introduction"}]},{"anchor":"API Reference","icon":"code","groups":[{"group":"Getting Started","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpoints","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Changelog","icon":"history","pages":[{"title":"Changelog","href":"/changelog"}]}]},{"language":"fr","navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/fr/introduction"}]},{"anchor":"Référence de l’API","icon":"code","groups":[{"group":"Prise en main","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Points de terminaison","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Journal des modifications","icon":"history","pages":[{"title":"Journal des modifications","href":"/changelog"}]}]},{"language":"de","navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Dokumentation","icon":"book-open","pages":[{"title":"Dokumentation","href":"/de/introduction"}]},{"anchor":"API-Referenz","icon":"code","groups":[{"group":"Erste Schritte","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpunkte","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Änderungsprotokoll","icon":"history","pages":[{"title":"Änderungsprotokoll","href":"/changelog"}]}]}]},"basePath":"","title":"Get all assets for a case - Wirespeed","buildId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","deploymentId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-i2a3QZ8E.js","utils-ChLwp8m0.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DRktVTDc.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-CA2pEs4T.js","snippetPresets-ClQ6XrKD.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-Ct_Lv36y.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-Cn2PYw9e.js","shallow-rkyymjXQ.js","getApiPlaygroundDisplay-BB9vkXtE.js","CodeSnippet-Bm5RU7m1.js","CodeSnippets-BgU9Deuz.js","Page-BUDYNlhG.js","getPastedJson-BD-6NNum.js","icon-8Z6tud2e.js","MethodPill-Tuzr4g3V.js","DuplicateIcon-0ceWFYhN.js","createIcon-FBXow_ST.js","DynamicMarkdown-CD8713Yy.js","SectionHeading-7zgzQbH-.js","axios-vUo_bRtp.js","Markdown-D7Ofw1oz.js","clsx-eKJ4rcii.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CwjSCXIK.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-9EK5IAXV.js"]}