Deprecated. Always false: test mode is replaced by the team master switches (chatOpsEnabled, remediationEnabled, sourceSystemUpdatesEnabled). Retained so existing public API clients keep receiving this required field. Removal scheduled for 2027-01-06.
Total distinct assets linked across this case, including ones not in assets. Present on list responses only.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Wirespeed","colors":{"primary":"#8B5CF6","light":"#8B5CF6","dark":"#8B5CF6"},"logo":{"light":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c","dark":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-dark.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=417d1d1996a8bb6674c9333da34ba256"},"favicon":"https://mintcdn.com/wirespeed/W6Ho2vhJrlRtLlBr/favicon.svg?fit=max\u0026auto=format\u0026n=W6Ho2vhJrlRtLlBr\u0026q=85\u0026s=ca5a14e92c415079a7c4742d16482b88","navbar":{"primary":{"type":"button","label":"Back to Wirespeed","href":"https://app.wirespeed.co"}},"footer":{"socials":{"x":"https://x.com/_wirespeed","github":"https://github.com/wirespeedsecurity","linkedin":"https://linkedin.com/company/wirespeedsecurity"}},"icons":{"library":"lucide"},"contextual":{"options":["copy","view","chatgpt","claude"],"display":"header"},"styling":{"latex":false},"navigation":{"languages":[{"language":"en","default":true,"href":"introduction"},{"language":"fr","hidden":false,"navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"href":"fr/introduction"},{"language":"de","hidden":false,"navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"href":"de/introduction"}]}},"deployment":{"deploymentMetadataValue":{"subdomain":"wirespeed","hasAudioNarration":false,"actualSubdomain":"wirespeed","customDomains":["docs.wirespeed.co"],"gitSource":{"type":"github","owner":"binaryedge","repo":"wirespeed-app","deployBranch":"main","contentDirectory":"apps/documentation","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aecbfa764441d6863c99943","collectionId":"ca6de594-1819-4889-afd4-759e02e6760f","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aecbfa764441d6863c99943"},"entitlements":{},"buildId":"6aee2e4f4037d8a342c0549e","clientVersion":"0.0.4076","searchFilterCounts":[{"language":"en","tag":"Documentation","count":134},{"language":"de","tag":"Dokumentation","count":134},{"language":"fr","tag":"Documentation","count":134},{"language":"default","tag":"API Reference","count":112},{"language":"default","tag":"Endpoints","count":111},{"language":"en","tag":"Integrations","count":104},{"language":"de","tag":"Integrationen","count":104},{"language":"fr","tag":"Intégrations","count":104},{"language":"default","tag":"Team","count":23},{"language":"default","tag":"Cases","count":14},{"language":"default","tag":"Detection","count":14},{"language":"default","tag":"Integration","count":14},{"language":"default","tag":"Asset","count":12},{"language":"default","tag":"Documentation","count":8},{"language":"default","tag":"Integrations","count":8},{"language":"default","tag":"Directory","count":7},{"language":"en","tag":"Assets","count":7},{"language":"de","tag":"Assets","count":7},{"language":"fr","tag":"Actifs","count":7},{"language":"en","tag":"Remediation","count":5},{"language":"en","tag":"Settings","count":5},{"language":"de","tag":"Behebung","count":5},{"language":"de","tag":"Einstellungen","count":5},{"language":"fr","tag":"Remédiation","count":5},{"language":"fr","tag":"Paramètres","count":5},{"language":"en","tag":"Events","count":4},{"language":"de","tag":"Ereignisse","count":4},{"language":"fr","tag":"Événements","count":4},{"language":"en","tag":"Chat Ops","count":3},{"language":"en","tag":"Get Started","count":3},{"language":"de","tag":"Chat Ops","count":3},{"language":"de","tag":"Erste Schritte","count":3},{"language":"fr","tag":"Chat Ops","count":3},{"language":"fr","tag":"Prise en main","count":3},{"language":"en","tag":"Custom Detections","count":2},{"language":"de","tag":"Benutzerdefinierte Detektionen","count":2},{"language":"fr","tag":"Détections personnalisées","count":2},{"language":"en","tag":"Exclusions","count":1},{"language":"de","tag":"Ausnahmen","count":1},{"language":"fr","tag":"Exclusions","count":1}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"styles.css","content":"img[src*=\"logo\"]{width:175px!important;height:auto!important;max-width:175px!important}header img,nav img,a[href=\"/\"] img{width:175px!important;height:auto!important;max-width:175px!important}"}],"page":{"pagePath":"api-reference/cases/get-case-by-id-or-sid","slug":"/api-reference/cases/get-case-by-id-or-sid","pageMetadata":{"title":"Get case by ID or SID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid","autogeneratedByOpenApi":true},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Get case by ID or SID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"operationId":"CasesController_findOne","parameters":["d9522a4b-9b04-42a0-9512-0dd4104cea23"],"responses":{"200":"3d07fce0-3dec-40a9-8e31-4fd23d056ee2","404":"2eee25e0-0cad-4608-a9c7-11ba99ab13d1"},"security":["929b99a3-02a9-4e1c-a19b-feb84ed05d1a"],"summary":"Get case by ID or SID","tags":["Cases"],"method":"get","type":"path","servers":["687faaa7-d478-42a7-8b2f-e3bf1c3d4068"],"path":"/v1/cases/{idOrSid}","baseUrlOptions":["https://api.wirespeed.co"],"title":"Get case by ID or SID","description":"","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"d9522a4b-9b04-42a0-9512-0dd4104cea23":{"name":"idOrSid","required":true,"in":"path","description":"Case ID or SID","schema":{"type":"string","isRequired":true,"description":"Case ID or SID","uniqueKey":"","typeLabel":"string"}}},"responses":{"3d07fce0-3dec-40a9-8e31-4fd23d056ee2":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the case","isRequired":true,"uniqueKey":"id","typeLabel":"string"},"sid":{"type":"string","description":"Short identifier for the case","isRequired":true,"uniqueKey":"sid","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this case","isRequired":true,"uniqueKey":"teamId","typeLabel":"string"},"status":{"type":"string","enum":["PREFLIGHT","NEW","PROCESSING","ESCALATED","HUNTING","MONITORING","CHATOPS","CLOSED"],"description":"Current status of the case","x-extensible-enum":true,"isRequired":true,"uniqueKey":"status","typeLabel":"enum\u003cstring>"},"createdAt":{"type":"string","description":"Timestamp when the case was created","isRequired":true,"uniqueKey":"createdAt","typeLabel":"string"},"detectionSids":{"description":"Array of detection SIDs associated with this case","type":"array","items":{"type":"string","uniqueKey":"detectionSids.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"detectionSids","typeLabel":"string[]"},"testMode":{"type":"boolean","deprecated":true,"x-sunset":"2027-01-06","description":"Deprecated. Always false: test mode is replaced by the team master switches (chatOpsEnabled, remediationEnabled, sourceSystemUpdatesEnabled). Retained so existing public API clients keep receiving this required field. Removal scheduled for 2027-01-06.","isRequired":true,"uniqueKey":"testMode","typeLabel":"boolean"},"firstDetectionSourceIngestedAt":{"type":"string","description":"Timestamp when first detection was ingested","isRequired":true,"uniqueKey":"firstDetectionSourceIngestedAt","typeLabel":"string"},"firstDetectionSourceDetectedAt":{"type":"string","description":"Timestamp when first detection was detected by source","isRequired":true,"uniqueKey":"firstDetectionSourceDetectedAt","typeLabel":"string"},"logs":{"description":"Array of log entries for this case","type":"array","items":{"type":"object","properties":{"log":{"type":"string","description":"Log message content","isRequired":true,"uniqueKey":"logs.items.[INDEX].log","typeLabel":"string"},"timestamp":{"type":"string","description":"Timestamp when the log was created","isRequired":true,"uniqueKey":"logs.items.[INDEX].timestamp","typeLabel":"string"},"debug":{"type":"boolean","description":"Whether this is a debug log entry","isRequired":true,"uniqueKey":"logs.items.[INDEX].debug","typeLabel":"boolean"}},"required":["log","timestamp","debug"],"uniqueKey":"logs.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"logs","typeLabel":"object[]"},"contained":{"type":"boolean","description":"Whether the threat has been contained","isRequired":true,"uniqueKey":"contained","typeLabel":"boolean"},"reingested":{"type":"boolean","description":"Whether the case has been reingested","isRequired":true,"uniqueKey":"reingested","typeLabel":"boolean"},"verdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"description":"Verdict assigned to the case","x-extensible-enum":true,"isRequired":true,"uniqueKey":"verdict","typeLabel":"enum\u003cstring>"},"title":{"type":"string","description":"Title of the case based on categories and verdict","isRequired":true,"uniqueKey":"title","typeLabel":"string"},"excludeFromMeans":{"type":"boolean","description":"Whether to exclude this case from mean calculations","isRequired":true,"uniqueKey":"excludeFromMeans","typeLabel":"boolean"},"firstRun":{"type":"boolean","description":"Whether this is the first run of the detection","isRequired":true,"uniqueKey":"firstRun","typeLabel":"boolean"},"containsVIP":{"type":"boolean","description":"Whether case involves VIP users","isRequired":true,"uniqueKey":"containsVIP","typeLabel":"boolean"},"containsHVA":{"type":"boolean","description":"Whether case involves critical assets","isRequired":true,"uniqueKey":"containsHVA","typeLabel":"boolean"},"containsMobile":{"type":"boolean","description":"Whether case involves mobile devices","isRequired":true,"uniqueKey":"containsMobile","typeLabel":"boolean"},"severity":{"type":"string","description":"Severity level of the case","isRequired":true,"uniqueKey":"severity","typeLabel":"string"},"severityOrdinal":{"type":"number","description":"Numeric value of severity for sorting","isRequired":true,"uniqueKey":"severityOrdinal","typeLabel":"number"},"nextSteps":{"description":"Materialised next steps across detections in this case","type":"array","items":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].id","typeLabel":"string"},"detectionId":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].detectionId","typeLabel":"string"},"bucket":{"type":"string","enum":["investigate","remediate","recover"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].bucket","typeLabel":"enum\u003cstring>"},"step":{"type":"string","enum":["generic","verify_user_activity","verify_email_interaction","verify_expected_tool_config","verify_breach_exposure_handled","audit_recent_activity","manually_review","review_for_awareness_only","revoke_user_sessions","require_mfa_re_enrollment","reset_user_password","disable_user_account","isolate_endpoint","lock_endpoint","quarantine_file","delete_file","delete_mailbox_rule","posture_fix","rollback_unauthorized_changes","review_email_financial_impact","restore_endpoint_to_clean_state","re_enable_after_false_positive","restore_quarantined_file"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].step","typeLabel":"enum\u003cstring>"},"label":{"type":"string","description":"Step label in the caller's language","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].label","typeLabel":"string"},"status":{"type":"string","enum":["pending","done","skipped","not_applicable","failed"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].status","typeLabel":"enum\u003cstring>"},"precomputed":{"type":"boolean","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].precomputed","typeLabel":"boolean"},"detectionSid":{"type":"string","uniqueKey":"nextSteps.items.[INDEX].detectionSid","typeLabel":"string"},"skipReason":{"oneOf":[{"type":"string","description":"Why the step was skipped or not applicable, in the caller's language","uniqueKey":"nextSteps.items.[INDEX].skipReason.oneOf.0","typeLabel":"string"},{"type":"null","description":"Why the step was skipped or not applicable, in the caller's language","uniqueKey":"nextSteps.items.[INDEX].skipReason.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].skipReason","typeLabel":"string | null"},"skipReasonCode":{"oneOf":[{"type":"string","enum":["detection_closed","identity_containment_disabled","no_directory_users","directory_user_no_integration","endpoint_containment_disabled","no_endpoints","endpoint_no_integration","file_containment_disabled","no_files","file_no_integration","on_premises_password_reset","mailbox_rule_containment_disabled","mailbox_rule_not_deletable"],"description":"Stable code for the skip reason. Null on steps recorded before codes existed; use `skipReason` then.","x-extensible-enum":true,"uniqueKey":"nextSteps.items.[INDEX].skipReasonCode.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["detection_closed","identity_containment_disabled","no_directory_users","directory_user_no_integration","endpoint_containment_disabled","no_endpoints","endpoint_no_integration","file_containment_disabled","no_files","file_no_integration","on_premises_password_reset","mailbox_rule_containment_disabled","mailbox_rule_not_deletable"],"description":"Stable code for the skip reason. Null on steps recorded before codes existed; use `skipReason` then.","x-extensible-enum":true,"uniqueKey":"nextSteps.items.[INDEX].skipReasonCode.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].skipReasonCode","typeLabel":"enum\u003cstring> | null"},"completedAt":{"oneOf":[{"type":"string","uniqueKey":"nextSteps.items.[INDEX].completedAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"nextSteps.items.[INDEX].completedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].completedAt","typeLabel":"string | null"},"completedBySource":{"oneOf":[{"type":"string","enum":["user","system"],"x-extensible-enum":true,"uniqueKey":"nextSteps.items.[INDEX].completedBySource.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["user","system"],"x-extensible-enum":true,"uniqueKey":"nextSteps.items.[INDEX].completedBySource.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].completedBySource","typeLabel":"enum\u003cstring> | null"},"completedBy":{"oneOf":[{"type":"object","required":["id","displayName"],"properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].completedBy.oneOf.0.id","typeLabel":"string"},"displayName":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].completedBy.oneOf.0.displayName","typeLabel":"string"}},"uniqueKey":"nextSteps.items.[INDEX].completedBy.oneOf.0","typeLabel":"object"},{"type":"null","uniqueKey":"nextSteps.items.[INDEX].completedBy.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].completedBy","typeLabel":"object | null"},"sourceKey":{"oneOf":[{"type":"string","uniqueKey":"nextSteps.items.[INDEX].sourceKey.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"nextSteps.items.[INDEX].sourceKey.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].sourceKey","typeLabel":"string | null"},"description":{"oneOf":[{"type":"string","description":"Plain-text details for a free-form generic step","uniqueKey":"nextSteps.items.[INDEX].description.oneOf.0","typeLabel":"string"},{"type":"null","description":"Plain-text details for a free-form generic step","uniqueKey":"nextSteps.items.[INDEX].description.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].description","typeLabel":"string | null"},"evidenceLink":{"oneOf":[{"type":"string","description":"Internal Explore link supporting a free-form generic step","uniqueKey":"nextSteps.items.[INDEX].evidenceLink.oneOf.0","typeLabel":"string"},{"type":"null","description":"Internal Explore link supporting a free-form generic step","uniqueKey":"nextSteps.items.[INDEX].evidenceLink.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].evidenceLink","typeLabel":"string | null"},"endpointId":{"oneOf":[{"type":"string","uniqueKey":"nextSteps.items.[INDEX].endpointId.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"nextSteps.items.[INDEX].endpointId.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].endpointId","typeLabel":"string | null"},"directoryUserId":{"oneOf":[{"type":"string","uniqueKey":"nextSteps.items.[INDEX].directoryUserId.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"nextSteps.items.[INDEX].directoryUserId.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].directoryUserId","typeLabel":"string | null"},"fileId":{"oneOf":[{"type":"string","uniqueKey":"nextSteps.items.[INDEX].fileId.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"nextSteps.items.[INDEX].fileId.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextSteps.items.[INDEX].fileId","typeLabel":"string | null"},"endpoint":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].endpoint.id","typeLabel":"string"},"displayName":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].endpoint.displayName","typeLabel":"string"}},"required":["id","displayName"],"uniqueKey":"nextSteps.items.[INDEX].endpoint","typeLabel":"object"},"directoryUser":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].directoryUser.id","typeLabel":"string"},"displayName":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].directoryUser.displayName","typeLabel":"string"},"email":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].directoryUser.email","typeLabel":"string"}},"required":["id","displayName","email"],"uniqueKey":"nextSteps.items.[INDEX].directoryUser","typeLabel":"object"},"file":{"type":"object","properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"nextSteps.items.[INDEX].file.id","typeLabel":"string"},"displayName":{"type":"string","uniqueKey":"nextSteps.items.[INDEX].file.displayName","typeLabel":"string"},"hash":{"type":"string","uniqueKey":"nextSteps.items.[INDEX].file.hash","typeLabel":"string"}},"required":["id"],"uniqueKey":"nextSteps.items.[INDEX].file","typeLabel":"object"}},"required":["id","detectionId","bucket","step","label","status","precomputed"],"uniqueKey":"nextSteps.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"nextSteps","typeLabel":"object[]"},"name":{"type":"string","description":"Custom name for the case","uniqueKey":"name","typeLabel":"string"},"lastNotifiedClientAt":{"oneOf":[{"type":"string","description":"Timestamp when the case was last notified to the client","uniqueKey":"lastNotifiedClientAt.oneOf.0","typeLabel":"string"},{"type":"null","description":"Timestamp when the case was last notified to the client","uniqueKey":"lastNotifiedClientAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"lastNotifiedClientAt","typeLabel":"string | null"},"updatedAt":{"type":"string","description":"Timestamp when the case was last updated","uniqueKey":"updatedAt","typeLabel":"string"},"closedAt":{"type":"string","description":"Timestamp when the case was closed","uniqueKey":"closedAt","typeLabel":"string"},"helpfulnessRating":{"oneOf":[{"type":"string","enum":["happy","neutral","unhappy"],"description":"Helpfulness feedback selected when case was resolved","x-extensible-enum":true,"uniqueKey":"helpfulnessRating.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["happy","neutral","unhappy"],"description":"Helpfulness feedback selected when case was resolved","x-extensible-enum":true,"uniqueKey":"helpfulnessRating.oneOf.1","typeLabel":"null"}],"uniqueKey":"helpfulnessRating","typeLabel":"enum\u003cstring> | null"},"categories":{"type":"array","description":"Array of categories assigned to this case","items":{"type":"string","enum":["OTHER__DIAGNOSTIC","OTHER__INFORMATIONAL_EVENT","OTHER__WARNING","OTHER__EXPERIMENTAL","OTHER__UNKNOWN","OTHER__DECEPTION","OTHER__DECEPTION__SIMULATION","OTHER__CUSTOM_DETECTION","CLOUD__INVOCATION","CLOUD__DISCOVERY","CLOUD__DATA_TRANSFER","CLOUD__PERSISTENCE","CLOUD__PUBLIC_BUCKET","ENDPOINT__DISCOVERY","ENDPOINT__EXECUTION","ENDPOINT__LIVE_OFF_THE_LAND","ENDPOINT__NUISANCE","ENDPOINT__MALWARE_DISCOVERY","ENDPOINT__MALWARE_EXECUTION","ENDPOINT__LATE_STAGE","ENDPOINT__PERSISTENCE","ENDPOINT__REMOTE_MANAGEMENT","ENDPOINT__LATERAL_MOVEMENT","ENDPOINT__IMPACT","ENDPOINT__EVASION","ENDPOINT__EXPLOITATION","ENDPOINT__SIMULATION","ENDPOINT__PLANNED_CHANGE","IDENTITY__LOGIN","IDENTITY__REJECTED_MFA","IDENTITY__DISCOVERY","IDENTITY__BRUTE_FORCE","IDENTITY__PUBLIC_CREDENTIAL_EXPOSURE","IDENTITY__PRIVATE_CREDENTIAL_EXPOSURE","IDENTITY__PERSISTENCE","IDENTITY__ACCOUNT_COMPROMISE","IDENTITY__OAUTH_GRANT","IDENTITY__SIMULATION","IDENTITY__PLANNED_CHANGE","NETWORK__INBOUND_CONNECTION","NETWORK__OUTBOUND_CONNECTION","NETWORK__PHISHING","NETWORK__NOISY","NETWORK__DISCOVERY","EMAIL__PHISHING","EMAIL__PHISHING_REPORTED","EMAIL__EVASION","EMAIL__MALWARE","EMAIL__MALICIOUS_LINK","EMAIL__GRAYMAIL","EMAIL__SPAM","EMAIL__BUSINESS_EMAIL_COMPROMISE","EMAIL__MAILBOX_RULE","EMAIL__CHAT","DATA__DATA_TRANSFER","DATA__DATA_SHARE","POSTURE__POSTURE","POSTURE__HEALTH"],"x-extensible-enum":true,"uniqueKey":"categories.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"categories","typeLabel":"enum\u003cstring>[]"},"verdictedAt":{"type":"string","description":"Timestamp when verdict was assigned","uniqueKey":"verdictedAt","typeLabel":"string"},"detectionCount":{"type":"number","description":"Number of detections in this case","uniqueKey":"detectionCount","typeLabel":"number"},"timeToClose":{"type":"number","description":"Time to close in seconds","uniqueKey":"timeToClose","typeLabel":"number"},"teamName":{"type":"string","description":"Name of the team that owns this case","uniqueKey":"teamName","typeLabel":"string"},"externalTicketId":{"type":"string","description":"External ticket ID from ticketing system integration","uniqueKey":"externalTicketId","typeLabel":"string"},"externalTicketIntegrationId":{"type":"string","description":"ID of integration used for external ticket","uniqueKey":"externalTicketIntegrationId","typeLabel":"string"},"autoContained":{"type":"boolean","description":"Whether threat was automatically contained","uniqueKey":"autoContained","typeLabel":"boolean"},"respondedAt":{"type":"string","description":"Timestamp when case was responded to","uniqueKey":"respondedAt","typeLabel":"string"},"platforms":{"description":"Array of integration platforms involved","type":"array","items":{"type":"string","uniqueKey":"platforms.items.[INDEX]","typeLabel":"string"},"uniqueKey":"platforms","typeLabel":"string[]"},"notes":{"type":"string","description":"Notes or comments about the case","uniqueKey":"notes","typeLabel":"string"},"clientNotified":{"type":"boolean","description":"Whether client has been notified about this case","uniqueKey":"clientNotified","typeLabel":"boolean"},"summary":{"type":"string","description":"AI-generated summary of the case","uniqueKey":"summary","typeLabel":"string"},"hasPassedAql":{"type":"boolean","description":"Whether at least one detection in this case has passed AQL quality review","uniqueKey":"hasPassedAql","typeLabel":"boolean"},"groups":{"oneOf":[{"type":"string","description":"CSV of unique group names across all detections in this case","uniqueKey":"groups.oneOf.0","typeLabel":"string"},{"type":"null","description":"CSV of unique group names across all detections in this case","uniqueKey":"groups.oneOf.1","typeLabel":"null"}],"uniqueKey":"groups","typeLabel":"string | null"},"groupSummaries":{"description":"Unique groups derived from the users and endpoints linked to this case","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Group ID","isRequired":true,"uniqueKey":"groupSummaries.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","description":"Group display name","isRequired":true,"uniqueKey":"groupSummaries.items.[INDEX].name","typeLabel":"string"},"color":{"oneOf":[{"type":"string","enum":["gray","red","orange","amber","green","teal","blue","indigo","purple","pink"],"x-extensible-enum":true,"uniqueKey":"groupSummaries.items.[INDEX].color.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["gray","red","orange","amber","green","teal","blue","indigo","purple","pink"],"x-extensible-enum":true,"uniqueKey":"groupSummaries.items.[INDEX].color.oneOf.1","typeLabel":"null"}],"uniqueKey":"groupSummaries.items.[INDEX].color","typeLabel":"enum\u003cstring> | null"},"icon":{"oneOf":[{"type":"string","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"x-extensible-enum":true,"uniqueKey":"groupSummaries.items.[INDEX].icon.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"x-extensible-enum":true,"uniqueKey":"groupSummaries.items.[INDEX].icon.oneOf.1","typeLabel":"null"}],"uniqueKey":"groupSummaries.items.[INDEX].icon","typeLabel":"enum\u003cstring> | null"}},"required":["id","name"],"uniqueKey":"groupSummaries.items.[INDEX]","typeLabel":"object"},"uniqueKey":"groupSummaries","typeLabel":"object[]"},"assets":{"description":"Up to 10 assets linked across this case's detections, interleaved by type. Present on list responses only.","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Asset ID","isRequired":true,"uniqueKey":"assets.items.[INDEX].id","typeLabel":"string"},"type":{"type":"string","enum":["USER","ENDPOINT","IP","DOMAIN","FILE"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"assets.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"name":{"type":"string","description":"Human-readable asset label","isRequired":true,"uniqueKey":"assets.items.[INDEX].name","typeLabel":"string"}},"required":["id","type","name"],"uniqueKey":"assets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"assets","typeLabel":"object[]"},"assetCount":{"type":"number","description":"Total distinct assets linked across this case, including ones not in `assets`. Present on list responses only.","uniqueKey":"assetCount","typeLabel":"number"}},"required":["id","sid","teamId","status","createdAt","detectionSids","testMode","firstDetectionSourceIngestedAt","firstDetectionSourceDetectedAt","logs","contained","reingested","verdict","title","excludeFromMeans","firstRun","containsVIP","containsHVA","containsMobile","severity","severityOrdinal","nextSteps"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"id":"\u003cstring>","sid":"\u003cstring>","teamId":"\u003cstring>","status":"PREFLIGHT","createdAt":"\u003cstring>","detectionSids":["\u003cstring>"],"testMode":true,"firstDetectionSourceIngestedAt":"\u003cstring>","firstDetectionSourceDetectedAt":"\u003cstring>","logs":[{"log":"\u003cstring>","timestamp":"\u003cstring>","debug":true}],"contained":true,"reingested":true,"verdict":"MALICIOUS","title":"\u003cstring>","excludeFromMeans":true,"firstRun":true,"containsVIP":true,"containsHVA":true,"containsMobile":true,"severity":"\u003cstring>","severityOrdinal":123,"nextSteps":[{"id":"\u003cstring>","detectionId":"\u003cstring>","bucket":"investigate","step":"generic","label":"\u003cstring>","status":"pending","precomputed":true,"detectionSid":"\u003cstring>","skipReason":"\u003cstring>","skipReasonCode":"detection_closed","completedAt":"\u003cstring>","completedBySource":"user","completedBy":{"id":"\u003cstring>","displayName":"\u003cstring>"},"sourceKey":"\u003cstring>","description":"\u003cstring>","evidenceLink":"\u003cstring>","endpointId":"\u003cstring>","directoryUserId":"\u003cstring>","fileId":"\u003cstring>","endpoint":{"id":"\u003cstring>","displayName":"\u003cstring>"},"directoryUser":{"id":"\u003cstring>","displayName":"\u003cstring>","email":"\u003cstring>"},"file":{"id":"\u003cstring>","displayName":"\u003cstring>","hash":"\u003cstring>"}}],"name":"\u003cstring>","lastNotifiedClientAt":"\u003cstring>","updatedAt":"\u003cstring>","closedAt":"\u003cstring>","helpfulnessRating":"happy","categories":["OTHER__DIAGNOSTIC"],"verdictedAt":"\u003cstring>","detectionCount":123,"timeToClose":123,"teamName":"\u003cstring>","externalTicketId":"\u003cstring>","externalTicketIntegrationId":"\u003cstring>","autoContained":true,"respondedAt":"\u003cstring>","platforms":["\u003cstring>"],"notes":"\u003cstring>","clientNotified":true,"summary":"\u003cstring>","hasPassedAql":true,"groups":"\u003cstring>","groupSummaries":[{"id":"\u003cstring>","name":"\u003cstring>","color":"gray","icon":"bot"}],"assets":[{"id":"\u003cstring>","type":"USER","name":"\u003cstring>"}],"assetCount":123}}},"exampleType":"generated"}},"exampleType":"generated"},"2eee25e0-0cad-4608-a9c7-11ba99ab13d1":{"description":""}},"security":{"929b99a3-02a9-4e1c-a19b-feb84ed05d1a":{"bearer":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"}}},"servers":{"687faaa7-d478-42a7-8b2f-e3bf1c3d4068":{"url":"https://api.wirespeed.co"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"bearer","name":"Authorization"}],"title":"bearer"}]},"originalFileLocation":"https://api.wirespeed.co/v1/openapi.json"},"subdomain":"wirespeed","siteName":"Wirespeed","title":"Get case by ID or SID - Wirespeed","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{"en":{"href":"/api-reference/cases/get-case-by-id-or-sid","matchLevel":0},"fr":{"href":"/api-reference/cases/get-case-by-id-or-sid","matchLevel":0},"de":{"href":"/api-reference/cases/get-case-by-id-or-sid","matchLevel":0}}},"lastModified":"2026-11-06T19:45:29.324Z","originalFileLocation":"api-reference/cases/get-case-by-id-or-sid.mdx","locale":"en"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"application-name\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Get case by ID or SID - Wirespeed\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Wirespeed\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Cases\u0026amp;title=Get+case+by+ID+or+SID\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=1751c8119f0b04665b1f80a675b214c581fb11aba530496219e40e3ff1adb8e4\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Get case by ID or SID - Wirespeed\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Cases\u0026amp;title=Get+case+by+ID+or+SID\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=1751c8119f0b04665b1f80a675b214c581fb11aba530496219e40e3ff1adb8e4\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#8B5CF6\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/cases/get-case-by-id-or-sid.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.wirespeed.co/#organization\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.wirespeed.co#website\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid#webpage\",\"url\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid\",\"name\":\"Get case by ID or SID\",\"dateModified\":\"2026-11-06T19:45:29.324Z\",\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"},\"breadcrumb\":{\"@id\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Endpoints\",\"item\":\"https://docs.wirespeed.co/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cases\",\"item\":\"https://docs.wirespeed.co/api-reference/cases/get-case-statistics-by-severity\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Get case by ID or SID\",\"item\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid#apireference\",\"headline\":\"Get case by ID or SID\",\"name\":\"Get case by ID or SID\",\"url\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid\",\"mainEntityOfPage\":{\"@id\":\"https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid#webpage\"},\"dateModified\":\"2026-11-06T19:45:29.324Z\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Wirespeed\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Wirespeed","nav":{"global":null,"languages":[{"language":"en","default":true,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/introduction"}]},{"anchor":"API Reference","icon":"code","groups":[{"group":"Getting Started","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpoints","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","description":"Averages time-to-detect, time-to-verdict, time-to-remediate, and time-to-close across all cases matching the same filters as the search endpoint. Pagination and sort fields are ignored.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Changelog","icon":"history","pages":[{"title":"Changelog","href":"/changelog"}]}]},{"language":"fr","navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/fr/introduction"}]},{"anchor":"Référence de l’API","icon":"code","groups":[{"group":"Prise en main","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Points de terminaison","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","description":"Averages time-to-detect, time-to-verdict, time-to-remediate, and time-to-close across all cases matching the same filters as the search endpoint. Pagination and sort fields are ignored.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Journal des modifications","icon":"history","pages":[{"title":"Journal des modifications","href":"/changelog"}]}]},{"language":"de","navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Dokumentation","icon":"book-open","pages":[{"title":"Dokumentation","href":"/de/introduction"}]},{"anchor":"API-Referenz","icon":"code","groups":[{"group":"Erste Schritte","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpunkte","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","description":"Averages time-to-detect, time-to-verdict, time-to-remediate, and time-to-close across all cases matching the same filters as the search endpoint. Pagination and sort fields are ignored.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Änderungsprotokoll","icon":"history","pages":[{"title":"Änderungsprotokoll","href":"/changelog"}]}]}]},"basePath":"","title":"Get case by ID or SID - Wirespeed","buildId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","deploymentId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-i2a3QZ8E.js","utils-ChLwp8m0.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DRktVTDc.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-CA2pEs4T.js","snippetPresets-ClQ6XrKD.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-Ct_Lv36y.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-Cn2PYw9e.js","shallow-rkyymjXQ.js","getApiPlaygroundDisplay-BB9vkXtE.js","CodeSnippet-Bm5RU7m1.js","CodeSnippets-BgU9Deuz.js","Page-BUDYNlhG.js","getPastedJson-BD-6NNum.js","icon-8Z6tud2e.js","MethodPill-Tuzr4g3V.js","DuplicateIcon-0ceWFYhN.js","createIcon-FBXow_ST.js","DynamicMarkdown-CD8713Yy.js","SectionHeading-7zgzQbH-.js","axios-vUo_bRtp.js","Markdown-D7Ofw1oz.js","clsx-eKJ4rcii.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CwjSCXIK.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-9EK5IAXV.js"]}