Array of detection list items (slim shape for tables)
Show child attributes
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Wirespeed","colors":{"primary":"#8B5CF6","light":"#8B5CF6","dark":"#8B5CF6"},"logo":{"light":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c","dark":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-dark.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=417d1d1996a8bb6674c9333da34ba256"},"favicon":"https://mintcdn.com/wirespeed/W6Ho2vhJrlRtLlBr/favicon.svg?fit=max\u0026auto=format\u0026n=W6Ho2vhJrlRtLlBr\u0026q=85\u0026s=ca5a14e92c415079a7c4742d16482b88","navbar":{"primary":{"type":"button","label":"Back to Wirespeed","href":"https://app.wirespeed.co"}},"footer":{"socials":{"x":"https://x.com/_wirespeed","github":"https://github.com/wirespeedsecurity","linkedin":"https://linkedin.com/company/wirespeedsecurity"}},"icons":{"library":"lucide"},"contextual":{"options":["copy","view","chatgpt","claude"],"display":"header"},"styling":{"latex":false},"navigation":{"languages":[{"language":"en","default":true,"href":"introduction"},{"language":"fr","hidden":false,"navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"href":"fr/introduction"},{"language":"de","hidden":false,"navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"href":"de/introduction"}]}},"deployment":{"deploymentMetadataValue":{"subdomain":"wirespeed","hasAudioNarration":false,"actualSubdomain":"wirespeed","customDomains":["docs.wirespeed.co"],"gitSource":{"type":"github","owner":"binaryedge","repo":"wirespeed-app","deployBranch":"main","contentDirectory":"apps/documentation","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aecbfa764441d6863c99943","collectionId":"ca6de594-1819-4889-afd4-759e02e6760f","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aecbfa764441d6863c99943"},"entitlements":{},"buildId":"6aee2e4f4037d8a342c0549e","clientVersion":"0.0.4076","searchFilterCounts":[{"language":"en","tag":"Documentation","count":134},{"language":"de","tag":"Dokumentation","count":134},{"language":"fr","tag":"Documentation","count":134},{"language":"default","tag":"API Reference","count":112},{"language":"default","tag":"Endpoints","count":111},{"language":"en","tag":"Integrations","count":104},{"language":"de","tag":"Integrationen","count":104},{"language":"fr","tag":"Intégrations","count":104},{"language":"default","tag":"Team","count":23},{"language":"default","tag":"Cases","count":14},{"language":"default","tag":"Detection","count":14},{"language":"default","tag":"Integration","count":14},{"language":"default","tag":"Asset","count":12},{"language":"default","tag":"Documentation","count":8},{"language":"default","tag":"Integrations","count":8},{"language":"default","tag":"Directory","count":7},{"language":"en","tag":"Assets","count":7},{"language":"de","tag":"Assets","count":7},{"language":"fr","tag":"Actifs","count":7},{"language":"en","tag":"Remediation","count":5},{"language":"en","tag":"Settings","count":5},{"language":"de","tag":"Behebung","count":5},{"language":"de","tag":"Einstellungen","count":5},{"language":"fr","tag":"Remédiation","count":5},{"language":"fr","tag":"Paramètres","count":5},{"language":"en","tag":"Events","count":4},{"language":"de","tag":"Ereignisse","count":4},{"language":"fr","tag":"Événements","count":4},{"language":"en","tag":"Chat Ops","count":3},{"language":"en","tag":"Get Started","count":3},{"language":"de","tag":"Chat Ops","count":3},{"language":"de","tag":"Erste Schritte","count":3},{"language":"fr","tag":"Chat Ops","count":3},{"language":"fr","tag":"Prise en main","count":3},{"language":"en","tag":"Custom Detections","count":2},{"language":"de","tag":"Benutzerdefinierte Detektionen","count":2},{"language":"fr","tag":"Détections personnalisées","count":2},{"language":"en","tag":"Exclusions","count":1},{"language":"de","tag":"Ausnahmen","count":1},{"language":"fr","tag":"Exclusions","count":1}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[],"googleFontsInlined":false},"customCss":[{"filePath":"styles.css","content":"img[src*=\"logo\"]{width:175px!important;height:auto!important;max-width:175px!important}header img,nav img,a[href=\"/\"] img{width:175px!important;height:auto!important;max-width:175px!important}"}],"page":{"pagePath":"api-reference/detection/search-and-list-detections","slug":"/api-reference/detection/search-and-list-detections","pageMetadata":{"title":"Search and list detections","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections","autogeneratedByOpenApi":true},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Search and list detections","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"operationId":"DetectionController_findAll","parameters":[],"requestBody":"2bd4173c-0ff8-4c5a-b939-17047d2db1cb","responses":{"200":"4a7e2e52-82e7-4e35-8a6c-49dd1b9aba3a","422":"388a01b3-fe77-4f53-95da-5ec00ce4cd35"},"security":["e3fbda4b-e80a-4823-bcfe-3b419c4dbe9c"],"summary":"Search and list detections","tags":["Detection"],"method":"post","type":"path","servers":["687faaa7-d478-42a7-8b2f-e3bf1c3d4068"],"path":"/v1/detection","baseUrlOptions":["https://api.wirespeed.co"],"title":"Search and list detections","description":"","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"size":{"type":"number","uniqueKey":"size","typeLabel":"number"},"page":{"type":"number","uniqueKey":"page","typeLabel":"number"},"filter":{"type":"string","uniqueKey":"filter","typeLabel":"string"},"search":{"type":"string","uniqueKey":"search","typeLabel":"string"},"orderBy":{"type":"string","uniqueKey":"orderBy","typeLabel":"string"},"orderDir":{"type":"string","enum":["asc","desc"],"x-extensible-enum":true,"uniqueKey":"orderDir","typeLabel":"enum\u003cstring>"},"days":{"type":"number","description":"Number of days for time-based filtering (1-365). Used by stats/widget endpoints to set the time window.","uniqueKey":"days","typeLabel":"number"},"startDate":{"type":"string","description":"Start date (inclusive, ISO8601 string)","uniqueKey":"startDate","typeLabel":"string"},"endDate":{"type":"string","description":"End date (inclusive, ISO8601 string)","uniqueKey":"endDate","typeLabel":"string"},"caseIdOrSid":{"type":"string","description":"Filter by case ID or case SID","uniqueKey":"caseIdOrSid","typeLabel":"string"},"statuses":{"type":"array","description":"Filter detections by status","items":{"type":"string","enum":["PREFLIGHT","NEW","PROCESSING","ESCALATED","HUNTING","MONITORING","CHATOPS","CLOSED"],"x-extensible-enum":true,"uniqueKey":"statuses.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"statuses","typeLabel":"enum\u003cstring>[]"},"verdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"description":"Filter detections by verdict","x-extensible-enum":true,"uniqueKey":"verdict","typeLabel":"enum\u003cstring>"},"verdicts":{"type":"array","description":"Filter detections by any selected verdict","items":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"x-extensible-enum":true,"uniqueKey":"verdicts.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"verdicts","typeLabel":"enum\u003cstring>[]"},"assetId":{"type":"string","description":"Filter detections involving a specific asset","uniqueKey":"assetId","typeLabel":"string"},"assetType":{"type":"string","enum":["USER","PROCESS","USER_AGENT","FILE","ENDPOINT","LOCATION","IP","DOMAIN"],"description":"Filter detections by asset type involved","x-extensible-enum":true,"uniqueKey":"assetType","typeLabel":"enum\u003cstring>"},"hideExcluded":{"type":"boolean","description":"Hide detections that have been excluded","uniqueKey":"hideExcluded","typeLabel":"boolean"},"onlyChatOps":{"type":"boolean","description":"Only show detections that were escalated","uniqueKey":"onlyChatOps","typeLabel":"boolean"},"onlyWasEscalated":{"type":"boolean","description":"Only show detections that were escalated","uniqueKey":"onlyWasEscalated","typeLabel":"boolean"},"onlyWasContained":{"type":"boolean","description":"Only show detections that resulted in containment","uniqueKey":"onlyWasContained","typeLabel":"boolean"},"onlyNotContained":{"type":"boolean","description":"Only show detections that did not result in containment","uniqueKey":"onlyNotContained","typeLabel":"boolean"},"onlyNotChatOps":{"type":"boolean","description":"Only show detections that did not involve Chat Ops","uniqueKey":"onlyNotChatOps","typeLabel":"boolean"},"historic":{"type":"boolean","description":"Filter by historic (first-run backfill) detections when true, or live detections when false","uniqueKey":"historic","typeLabel":"boolean"},"potentialActions":{"type":"array","description":"Only show detections whose verdict rule would take any of these actions with automation enabled (matches the team analytics Potential Actions cards)","items":{"type":"string","enum":["ESCALATE","CONTAINMENT","CHAT_OPS"],"x-extensible-enum":true,"uniqueKey":"potentialActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"potentialActions","typeLabel":"enum\u003cstring>[]"},"hideDemoClients":{"type":"boolean","description":"Hide detections from demo client teams","uniqueKey":"hideDemoClients","typeLabel":"boolean"},"categoryClass":{"type":"string","enum":["ENDPOINT","IDENTITY","CLOUD","EMAIL","NETWORK","DATA","POSTURE","OTHER"],"description":"Filter detections by category class","x-extensible-enum":true,"uniqueKey":"categoryClass","typeLabel":"enum\u003cstring>"},"categoryClasses":{"type":"array","description":"Filter detections by any selected category class","items":{"type":"string","enum":["ENDPOINT","IDENTITY","CLOUD","EMAIL","NETWORK","DATA","POSTURE","OTHER"],"x-extensible-enum":true,"uniqueKey":"categoryClasses.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"categoryClasses","typeLabel":"enum\u003cstring>[]"},"category":{"type":"string","enum":["OTHER__DIAGNOSTIC","OTHER__INFORMATIONAL_EVENT","OTHER__WARNING","OTHER__EXPERIMENTAL","OTHER__UNKNOWN","OTHER__DECEPTION","OTHER__DECEPTION__SIMULATION","OTHER__CUSTOM_DETECTION","CLOUD__INVOCATION","CLOUD__DISCOVERY","CLOUD__DATA_TRANSFER","CLOUD__PERSISTENCE","CLOUD__PUBLIC_BUCKET","ENDPOINT__DISCOVERY","ENDPOINT__EXECUTION","ENDPOINT__LIVE_OFF_THE_LAND","ENDPOINT__NUISANCE","ENDPOINT__MALWARE_DISCOVERY","ENDPOINT__MALWARE_EXECUTION","ENDPOINT__LATE_STAGE","ENDPOINT__PERSISTENCE","ENDPOINT__REMOTE_MANAGEMENT","ENDPOINT__LATERAL_MOVEMENT","ENDPOINT__IMPACT","ENDPOINT__EVASION","ENDPOINT__EXPLOITATION","ENDPOINT__SIMULATION","ENDPOINT__PLANNED_CHANGE","IDENTITY__LOGIN","IDENTITY__REJECTED_MFA","IDENTITY__DISCOVERY","IDENTITY__BRUTE_FORCE","IDENTITY__PUBLIC_CREDENTIAL_EXPOSURE","IDENTITY__PRIVATE_CREDENTIAL_EXPOSURE","IDENTITY__PERSISTENCE","IDENTITY__ACCOUNT_COMPROMISE","IDENTITY__OAUTH_GRANT","IDENTITY__SIMULATION","IDENTITY__PLANNED_CHANGE","NETWORK__INBOUND_CONNECTION","NETWORK__OUTBOUND_CONNECTION","NETWORK__PHISHING","NETWORK__NOISY","NETWORK__DISCOVERY","EMAIL__PHISHING","EMAIL__PHISHING_REPORTED","EMAIL__EVASION","EMAIL__MALWARE","EMAIL__MALICIOUS_LINK","EMAIL__GRAYMAIL","EMAIL__SPAM","EMAIL__BUSINESS_EMAIL_COMPROMISE","EMAIL__MAILBOX_RULE","EMAIL__CHAT","DATA__DATA_TRANSFER","DATA__DATA_SHARE","POSTURE__POSTURE","POSTURE__HEALTH"],"description":"Filter detections by specific category","x-extensible-enum":true,"uniqueKey":"category","typeLabel":"enum\u003cstring>"},"categories":{"type":"array","description":"Filter detections by any selected category","items":{"type":"string","enum":["OTHER__DIAGNOSTIC","OTHER__INFORMATIONAL_EVENT","OTHER__WARNING","OTHER__EXPERIMENTAL","OTHER__UNKNOWN","OTHER__DECEPTION","OTHER__DECEPTION__SIMULATION","OTHER__CUSTOM_DETECTION","CLOUD__INVOCATION","CLOUD__DISCOVERY","CLOUD__DATA_TRANSFER","CLOUD__PERSISTENCE","CLOUD__PUBLIC_BUCKET","ENDPOINT__DISCOVERY","ENDPOINT__EXECUTION","ENDPOINT__LIVE_OFF_THE_LAND","ENDPOINT__NUISANCE","ENDPOINT__MALWARE_DISCOVERY","ENDPOINT__MALWARE_EXECUTION","ENDPOINT__LATE_STAGE","ENDPOINT__PERSISTENCE","ENDPOINT__REMOTE_MANAGEMENT","ENDPOINT__LATERAL_MOVEMENT","ENDPOINT__IMPACT","ENDPOINT__EVASION","ENDPOINT__EXPLOITATION","ENDPOINT__SIMULATION","ENDPOINT__PLANNED_CHANGE","IDENTITY__LOGIN","IDENTITY__REJECTED_MFA","IDENTITY__DISCOVERY","IDENTITY__BRUTE_FORCE","IDENTITY__PUBLIC_CREDENTIAL_EXPOSURE","IDENTITY__PRIVATE_CREDENTIAL_EXPOSURE","IDENTITY__PERSISTENCE","IDENTITY__ACCOUNT_COMPROMISE","IDENTITY__OAUTH_GRANT","IDENTITY__SIMULATION","IDENTITY__PLANNED_CHANGE","NETWORK__INBOUND_CONNECTION","NETWORK__OUTBOUND_CONNECTION","NETWORK__PHISHING","NETWORK__NOISY","NETWORK__DISCOVERY","EMAIL__PHISHING","EMAIL__PHISHING_REPORTED","EMAIL__EVASION","EMAIL__MALWARE","EMAIL__MALICIOUS_LINK","EMAIL__GRAYMAIL","EMAIL__SPAM","EMAIL__BUSINESS_EMAIL_COMPROMISE","EMAIL__MAILBOX_RULE","EMAIL__CHAT","DATA__DATA_TRANSFER","DATA__DATA_SHARE","POSTURE__POSTURE","POSTURE__HEALTH"],"x-extensible-enum":true,"uniqueKey":"categories.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"categories","typeLabel":"enum\u003cstring>[]"},"exclusionId":{"type":"string","description":"Filter detections by exclusion rule ID","uniqueKey":"exclusionId","typeLabel":"string"},"severity":{"type":"string","enum":["INFORMATIONAL","LOW","MEDIUM","HIGH","CRITICAL"],"description":"Filter detections by severity","x-extensible-enum":true,"uniqueKey":"severity","typeLabel":"enum\u003cstring>"},"severities":{"type":"array","description":"Filter detections by any selected severity","items":{"type":"string","enum":["INFORMATIONAL","LOW","MEDIUM","HIGH","CRITICAL"],"x-extensible-enum":true,"uniqueKey":"severities.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"severities","typeLabel":"enum\u003cstring>[]"},"integrationPlatform":{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Filter detections by integration platform","x-extensible-enum":true,"uniqueKey":"integrationPlatform","typeLabel":"enum\u003cstring>"},"integrationPlatforms":{"type":"array","description":"Filter detections by any selected integration platform","items":{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"x-extensible-enum":true,"uniqueKey":"integrationPlatforms.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"integrationPlatforms","typeLabel":"enum\u003cstring>[]"},"createdAt":{"type":"object","description":"Filter by creation date","properties":{"gt":{"type":"string","description":"Filter for dates greater than this value","uniqueKey":"createdAt.gt","typeLabel":"string"},"gte":{"type":"string","description":"Filter for dates greater than or equal to this value","uniqueKey":"createdAt.gte","typeLabel":"string"},"lt":{"type":"string","description":"Filter for dates less than this value","uniqueKey":"createdAt.lt","typeLabel":"string"},"lte":{"type":"string","description":"Filter for dates less than or equal to this value","uniqueKey":"createdAt.lte","typeLabel":"string"}},"uniqueKey":"createdAt","typeLabel":"object"},"groupIds":{"description":"Filter detections by group IDs (OR) — matches detections whose users or endpoints belong to any of the specified groups","type":"array","items":{"type":"string","uniqueKey":"groupIds.items.[INDEX]","typeLabel":"string"},"uniqueKey":"groupIds","typeLabel":"string[]"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"size":123,"page":123,"filter":"\u003cstring>","search":"\u003cstring>","orderBy":"\u003cstring>","days":123,"startDate":"\u003cstring>","endDate":"\u003cstring>","caseIdOrSid":"\u003cstring>","statuses":[],"verdicts":[],"assetId":"\u003cstring>","hideExcluded":true,"onlyChatOps":true,"onlyWasEscalated":true,"onlyWasContained":true,"onlyNotContained":true,"onlyNotChatOps":true,"historic":true,"potentialActions":[],"hideDemoClients":true,"categoryClasses":[],"categories":[],"exclusionId":"\u003cstring>","severities":[],"integrationPlatforms":[],"createdAt":{"gt":"\u003cstring>","gte":"\u003cstring>","lt":"\u003cstring>","lte":"\u003cstring>"},"groupIds":["\u003cstring>"]}}},"exampleType":"generated"}},"exampleType":"generated"},"responses":{"4a7e2e52-82e7-4e35-8a6c-49dd1b9aba3a":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"description":"Array of detection list items (slim shape for tables)","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the detection","isRequired":true,"uniqueKey":"data.items.[INDEX].id","typeLabel":"string"},"teamId":{"type":"string","description":"ID of the team that owns this detection","isRequired":true,"uniqueKey":"data.items.[INDEX].teamId","typeLabel":"string"},"sid":{"type":"string","description":"Short identifier for this detection","isRequired":true,"uniqueKey":"data.items.[INDEX].sid","typeLabel":"string"},"integrationPlatform":{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Source integration platform that generated this detection","x-extensible-enum":true,"isRequired":true,"uniqueKey":"data.items.[INDEX].integrationPlatform","typeLabel":"enum\u003cstring>"},"severityOrdinal":{"type":"number","description":"Numeric representation of severity for sorting purposes","isRequired":true,"uniqueKey":"data.items.[INDEX].severityOrdinal","typeLabel":"number"},"severity":{"type":"string","enum":["INFORMATIONAL","LOW","MEDIUM","HIGH","CRITICAL"],"description":"Severity level of the detection","x-extensible-enum":true,"isRequired":true,"uniqueKey":"data.items.[INDEX].severity","typeLabel":"enum\u003cstring>"},"category":{"type":"string","enum":["OTHER__DIAGNOSTIC","OTHER__INFORMATIONAL_EVENT","OTHER__WARNING","OTHER__EXPERIMENTAL","OTHER__UNKNOWN","OTHER__DECEPTION","OTHER__DECEPTION__SIMULATION","OTHER__CUSTOM_DETECTION","CLOUD__INVOCATION","CLOUD__DISCOVERY","CLOUD__DATA_TRANSFER","CLOUD__PERSISTENCE","CLOUD__PUBLIC_BUCKET","ENDPOINT__DISCOVERY","ENDPOINT__EXECUTION","ENDPOINT__LIVE_OFF_THE_LAND","ENDPOINT__NUISANCE","ENDPOINT__MALWARE_DISCOVERY","ENDPOINT__MALWARE_EXECUTION","ENDPOINT__LATE_STAGE","ENDPOINT__PERSISTENCE","ENDPOINT__REMOTE_MANAGEMENT","ENDPOINT__LATERAL_MOVEMENT","ENDPOINT__IMPACT","ENDPOINT__EVASION","ENDPOINT__EXPLOITATION","ENDPOINT__SIMULATION","ENDPOINT__PLANNED_CHANGE","IDENTITY__LOGIN","IDENTITY__REJECTED_MFA","IDENTITY__DISCOVERY","IDENTITY__BRUTE_FORCE","IDENTITY__PUBLIC_CREDENTIAL_EXPOSURE","IDENTITY__PRIVATE_CREDENTIAL_EXPOSURE","IDENTITY__PERSISTENCE","IDENTITY__ACCOUNT_COMPROMISE","IDENTITY__OAUTH_GRANT","IDENTITY__SIMULATION","IDENTITY__PLANNED_CHANGE","NETWORK__INBOUND_CONNECTION","NETWORK__OUTBOUND_CONNECTION","NETWORK__PHISHING","NETWORK__NOISY","NETWORK__DISCOVERY","EMAIL__PHISHING","EMAIL__PHISHING_REPORTED","EMAIL__EVASION","EMAIL__MALWARE","EMAIL__MALICIOUS_LINK","EMAIL__GRAYMAIL","EMAIL__SPAM","EMAIL__BUSINESS_EMAIL_COMPROMISE","EMAIL__MAILBOX_RULE","EMAIL__CHAT","DATA__DATA_TRANSFER","DATA__DATA_SHARE","POSTURE__POSTURE","POSTURE__HEALTH"],"description":"Security category classification for this detection","x-extensible-enum":true,"isRequired":true,"uniqueKey":"data.items.[INDEX].category","typeLabel":"enum\u003cstring>"},"status":{"type":"string","enum":["PREFLIGHT","NEW","PROCESSING","ESCALATED","HUNTING","MONITORING","CHATOPS","CLOSED"],"description":"Current status of the detection","x-extensible-enum":true,"isRequired":true,"uniqueKey":"data.items.[INDEX].status","typeLabel":"enum\u003cstring>"},"verdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"description":"Final verdict assigned to the detection","x-extensible-enum":true,"isRequired":true,"uniqueKey":"data.items.[INDEX].verdict","typeLabel":"enum\u003cstring>"},"sourceDetectedAt":{"type":"string","description":"Timestamp when the detection was originally detected by source","isRequired":true,"uniqueKey":"data.items.[INDEX].sourceDetectedAt","typeLabel":"string"},"containsVIP":{"type":"boolean","description":"Whether this detection involves VIP users","isRequired":true,"uniqueKey":"data.items.[INDEX].containsVIP","typeLabel":"boolean"},"containsHVA":{"type":"boolean","description":"Whether this detection involves critical assets","isRequired":true,"uniqueKey":"data.items.[INDEX].containsHVA","typeLabel":"boolean"},"excluded":{"type":"boolean","description":"Whether this detection is excluded by an exclusion rule","isRequired":true,"uniqueKey":"data.items.[INDEX].excluded","typeLabel":"boolean"},"createdAt":{"type":"string","description":"Timestamp when the detection was created","isRequired":true,"uniqueKey":"data.items.[INDEX].createdAt","typeLabel":"string"},"testMode":{"type":"boolean","deprecated":true,"x-sunset":"2027-01-06","description":"Deprecated. Always false: test mode is replaced by the team master switches (chatOpsEnabled, remediationEnabled, sourceSystemUpdatesEnabled). Retained so existing public API clients keep receiving this required field. Removal scheduled for 2027-01-06.","isRequired":true,"uniqueKey":"data.items.[INDEX].testMode","typeLabel":"boolean"},"reingested":{"type":"boolean","description":"Whether this detection was reprocessed after initial ingestion","isRequired":true,"uniqueKey":"data.items.[INDEX].reingested","typeLabel":"boolean"},"groupSummaries":{"description":"Unique groups derived from the users and endpoints linked to this detection","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Group ID","isRequired":true,"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","description":"Group display name","isRequired":true,"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].name","typeLabel":"string"},"color":{"oneOf":[{"type":"string","enum":["gray","red","orange","amber","green","teal","blue","indigo","purple","pink"],"x-extensible-enum":true,"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].color.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["gray","red","orange","amber","green","teal","blue","indigo","purple","pink"],"x-extensible-enum":true,"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].color.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].color","typeLabel":"enum\u003cstring> | null"},"icon":{"oneOf":[{"type":"string","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"x-extensible-enum":true,"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].icon.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"x-extensible-enum":true,"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].icon.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX].icon","typeLabel":"enum\u003cstring> | null"}},"required":["id","name"],"uniqueKey":"data.items.[INDEX].groupSummaries.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"data.items.[INDEX].groupSummaries","typeLabel":"object[]"},"assets":{"description":"Up to 10 linked assets, interleaved by type","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Asset ID","isRequired":true,"uniqueKey":"data.items.[INDEX].assets.items.[INDEX].id","typeLabel":"string"},"type":{"type":"string","enum":["USER","ENDPOINT","IP","DOMAIN","FILE"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"data.items.[INDEX].assets.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"name":{"type":"string","description":"Human-readable asset label","isRequired":true,"uniqueKey":"data.items.[INDEX].assets.items.[INDEX].name","typeLabel":"string"}},"required":["id","type","name"],"uniqueKey":"data.items.[INDEX].assets.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"data.items.[INDEX].assets","typeLabel":"object[]"},"assetCount":{"type":"number","description":"Total distinct linked assets, including ones not in `assets`","isRequired":true,"uniqueKey":"data.items.[INDEX].assetCount","typeLabel":"number"},"teamName":{"type":"string","description":"Name of the team","uniqueKey":"data.items.[INDEX].teamName","typeLabel":"string"},"sourceName":{"type":"string","description":"Name of the source that generated this detection","uniqueKey":"data.items.[INDEX].sourceName","typeLabel":"string"},"displaySourceName":{"oneOf":[{"type":"string","description":"`sourceName` rendered for display in the caller's language. Equals `sourceName` for vendor titles. Filter, sort, and match on `sourceName`.","uniqueKey":"data.items.[INDEX].displaySourceName.oneOf.0","typeLabel":"string"},{"type":"null","description":"`sourceName` rendered for display in the caller's language. Equals `sourceName` for vendor titles. Filter, sort, and match on `sourceName`.","uniqueKey":"data.items.[INDEX].displaySourceName.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.items.[INDEX].displaySourceName","typeLabel":"string | null"},"caseSid":{"type":"string","description":"Short identifier for the case this detection belongs to","uniqueKey":"data.items.[INDEX].caseSid","typeLabel":"string"},"exclusionId":{"type":"string","description":"ID of the exclusion rule that matches this detection","uniqueKey":"data.items.[INDEX].exclusionId","typeLabel":"string"}},"required":["id","teamId","sid","integrationPlatform","severityOrdinal","severity","category","status","verdict","sourceDetectedAt","containsVIP","containsHVA","excluded","createdAt","testMode","reingested","groupSummaries","assets","assetCount"],"uniqueKey":"data.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"data","typeLabel":"object[]"}},"required":["data"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"data":[{"id":"\u003cstring>","teamId":"\u003cstring>","sid":"\u003cstring>","integrationPlatform":"acronis","severityOrdinal":123,"severity":"INFORMATIONAL","category":"OTHER__DIAGNOSTIC","status":"PREFLIGHT","verdict":"MALICIOUS","sourceDetectedAt":"\u003cstring>","containsVIP":true,"containsHVA":true,"excluded":true,"createdAt":"\u003cstring>","testMode":true,"reingested":true,"groupSummaries":[{"id":"\u003cstring>","name":"\u003cstring>","color":"gray","icon":"bot"}],"assets":[{"id":"\u003cstring>","type":"USER","name":"\u003cstring>"}],"assetCount":123,"teamName":"\u003cstring>","sourceName":"\u003cstring>","displaySourceName":"\u003cstring>","caseSid":"\u003cstring>","exclusionId":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"},"388a01b3-fe77-4f53-95da-5ec00ce4cd35":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"statusCode":{"type":"number","isRequired":true,"uniqueKey":"statusCode","typeLabel":"number"},"code":{"type":"string","description":"Stable machine-readable error code. Clients should branch and translate on this instead of `message`.","uniqueKey":"code","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the message for `code`.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"params.additionalProperties","typeLabel":"string | number | boolean | null"},"uniqueKey":"params","typeLabel":"object"},"validationErrors":{"description":"Per-property failures when `code` is `VALIDATION_FAILED` from request validation.","type":"array","items":{"type":"object","properties":{"property":{"type":"string","description":"Dotted path of the invalid property.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].property","typeLabel":"string"},"constraint":{"type":"string","description":"class-validator constraint name; clients translate `errors:validation.\u003cconstraint>`.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].constraint","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the constraint message.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties","typeLabel":"string | number | boolean | null"},"isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].params","typeLabel":"object"},"code":{"type":"string","description":"Catalog code overriding the constraint translation.","uniqueKey":"validationErrors.items.[INDEX].code","typeLabel":"string"}},"required":["property","constraint","params"],"uniqueKey":"validationErrors.items.[INDEX]","typeLabel":"object"},"uniqueKey":"validationErrors","typeLabel":"object[]"}},"required":["message","statusCode"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"message":"\u003cstring>","statusCode":123,"code":"\u003cstring>","params":{},"validationErrors":[{"property":"\u003cstring>","constraint":"\u003cstring>","params":{},"code":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"e3fbda4b-e80a-4823-bcfe-3b419c4dbe9c":{"bearer":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"}}},"servers":{"687faaa7-d478-42a7-8b2f-e3bf1c3d4068":{"url":"https://api.wirespeed.co"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"bearer","name":"Authorization"}],"title":"bearer"}]},"originalFileLocation":"https://api.wirespeed.co/v1/openapi.json"},"subdomain":"wirespeed","siteName":"Wirespeed","title":"Search and list detections - Wirespeed","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{"en":{"href":"/api-reference/detection/search-and-list-detections","matchLevel":0},"fr":{"href":"/api-reference/detection/search-and-list-detections","matchLevel":0},"de":{"href":"/api-reference/detection/search-and-list-detections","matchLevel":0}}},"lastModified":"2026-11-06T19:45:30.631Z","originalFileLocation":"api-reference/detection/search-and-list-detections.mdx","locale":"en"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"application-name\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Search and list detections - Wirespeed\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Wirespeed\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Detection\u0026amp;title=Search+and+list+detections\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=48e12e59486ddcc4b6ac5ba01698e6a096490583c6096e886e962c0894513312\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Search and list detections - Wirespeed\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Detection\u0026amp;title=Search+and+list+detections\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=48e12e59486ddcc4b6ac5ba01698e6a096490583c6096e886e962c0894513312\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#8B5CF6\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/detection/search-and-list-detections.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.wirespeed.co/#organization\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.wirespeed.co#website\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections#webpage\",\"url\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections\",\"name\":\"Search and list detections\",\"dateModified\":\"2026-11-06T19:45:30.631Z\",\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"},\"breadcrumb\":{\"@id\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Endpoints\",\"item\":\"https://docs.wirespeed.co/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Detection\",\"item\":\"https://docs.wirespeed.co/api-reference/detection/get-detection-statistics-by-severity\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Search and list detections\",\"item\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections#apireference\",\"headline\":\"Search and list detections\",\"name\":\"Search and list detections\",\"url\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections\",\"mainEntityOfPage\":{\"@id\":\"https://docs.wirespeed.co/api-reference/detection/search-and-list-detections#webpage\"},\"dateModified\":\"2026-11-06T19:45:30.631Z\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Wirespeed\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Wirespeed","nav":{"global":null,"languages":[{"language":"en","default":true,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/introduction"}]},{"anchor":"API Reference","icon":"code","groups":[{"group":"Getting Started","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpoints","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Changelog","icon":"history","pages":[{"title":"Changelog","href":"/changelog"}]}]},{"language":"fr","navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/fr/introduction"}]},{"anchor":"Référence de l’API","icon":"code","groups":[{"group":"Prise en main","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Points de terminaison","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Journal des modifications","icon":"history","pages":[{"title":"Journal des modifications","href":"/changelog"}]}]},{"language":"de","navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Dokumentation","icon":"book-open","pages":[{"title":"Dokumentation","href":"/de/introduction"}]},{"anchor":"API-Referenz","icon":"code","groups":[{"group":"Erste Schritte","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpunkte","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Änderungsprotokoll","icon":"history","pages":[{"title":"Änderungsprotokoll","href":"/changelog"}]}]}]},"basePath":"","title":"Search and list detections - Wirespeed","buildId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","deploymentId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-i2a3QZ8E.js","utils-ChLwp8m0.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DRktVTDc.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-CA2pEs4T.js","snippetPresets-ClQ6XrKD.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-Ct_Lv36y.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-Cn2PYw9e.js","shallow-rkyymjXQ.js","getApiPlaygroundDisplay-BB9vkXtE.js","CodeSnippet-Bm5RU7m1.js","CodeSnippets-BgU9Deuz.js","Page-BUDYNlhG.js","getPastedJson-BD-6NNum.js","icon-8Z6tud2e.js","MethodPill-Tuzr4g3V.js","DuplicateIcon-0ceWFYhN.js","createIcon-FBXow_ST.js","DynamicMarkdown-CD8713Yy.js","SectionHeading-7zgzQbH-.js","axios-vUo_bRtp.js","Markdown-D7Ofw1oz.js","clsx-eKJ4rcii.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CwjSCXIK.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-9EK5IAXV.js"]}