Every email address across the whole canonical cluster (this row plus every linked source row), so authentication history reads span all of the directories the person exists in rather than the single source being viewed. Falls back to this row's emails when the row has no cluster.
Whether the user can be contained via automation. Deprecated — use isUserContainable logic in the containment dialog instead. This is just an alias to user.managed
Actions the source product reported taking on this asset for the detection
Available options:
BLOCKED,
QUARANTINED,
KILLED,
REMEDIATED,
ISOLATED,
PASSWORD_RESET,
ACTION_FAILED
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Wirespeed","colors":{"primary":"#8B5CF6","light":"#8B5CF6","dark":"#8B5CF6"},"logo":{"light":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c","dark":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-dark.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=417d1d1996a8bb6674c9333da34ba256"},"favicon":"https://mintcdn.com/wirespeed/W6Ho2vhJrlRtLlBr/favicon.svg?fit=max\u0026auto=format\u0026n=W6Ho2vhJrlRtLlBr\u0026q=85\u0026s=ca5a14e92c415079a7c4742d16482b88","navbar":{"primary":{"type":"button","label":"Back to Wirespeed","href":"https://app.wirespeed.co"}},"footer":{"socials":{"x":"https://x.com/_wirespeed","github":"https://github.com/wirespeedsecurity","linkedin":"https://linkedin.com/company/wirespeedsecurity"}},"icons":{"library":"lucide"},"contextual":{"options":["copy","view","chatgpt","claude"],"display":"header"},"styling":{"latex":false},"navigation":{"languages":[{"language":"en","default":true,"href":"introduction"},{"language":"fr","hidden":false,"navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"href":"fr/introduction"},{"language":"de","hidden":false,"navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"href":"de/introduction"}]}},"deployment":{"deploymentMetadataValue":{"subdomain":"wirespeed","hasAudioNarration":false,"actualSubdomain":"wirespeed","customDomains":["docs.wirespeed.co"],"gitSource":{"type":"github","owner":"binaryedge","repo":"wirespeed-app","deployBranch":"main","contentDirectory":"apps/documentation","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aecbfa764441d6863c99943","collectionId":"ca6de594-1819-4889-afd4-759e02e6760f","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aecbfa764441d6863c99943"},"entitlements":{},"buildId":"6aee2e4f4037d8a342c0549e","clientVersion":"0.0.4076","searchFilterCounts":[{"language":"en","tag":"Documentation","count":134},{"language":"de","tag":"Dokumentation","count":134},{"language":"fr","tag":"Documentation","count":134},{"language":"default","tag":"API Reference","count":112},{"language":"default","tag":"Endpoints","count":111},{"language":"en","tag":"Integrations","count":104},{"language":"de","tag":"Integrationen","count":104},{"language":"fr","tag":"Intégrations","count":104},{"language":"default","tag":"Team","count":23},{"language":"default","tag":"Cases","count":14},{"language":"default","tag":"Detection","count":14},{"language":"default","tag":"Integration","count":14},{"language":"default","tag":"Asset","count":12},{"language":"default","tag":"Documentation","count":8},{"language":"default","tag":"Integrations","count":8},{"language":"default","tag":"Directory","count":7},{"language":"en","tag":"Assets","count":7},{"language":"de","tag":"Assets","count":7},{"language":"fr","tag":"Actifs","count":7},{"language":"en","tag":"Remediation","count":5},{"language":"en","tag":"Settings","count":5},{"language":"de","tag":"Behebung","count":5},{"language":"de","tag":"Einstellungen","count":5},{"language":"fr","tag":"Remédiation","count":5},{"language":"fr","tag":"Paramètres","count":5},{"language":"en","tag":"Events","count":4},{"language":"de","tag":"Ereignisse","count":4},{"language":"fr","tag":"Événements","count":4},{"language":"en","tag":"Chat Ops","count":3},{"language":"en","tag":"Get Started","count":3},{"language":"de","tag":"Chat Ops","count":3},{"language":"de","tag":"Erste Schritte","count":3},{"language":"fr","tag":"Chat Ops","count":3},{"language":"fr","tag":"Prise en main","count":3},{"language":"en","tag":"Custom Detections","count":2},{"language":"de","tag":"Benutzerdefinierte Detektionen","count":2},{"language":"fr","tag":"Détections personnalisées","count":2},{"language":"en","tag":"Exclusions","count":1},{"language":"de","tag":"Ausnahmen","count":1},{"language":"fr","tag":"Exclusions","count":1}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"styles.css","content":"img[src*=\"logo\"]{width:175px!important;height:auto!important;max-width:175px!important}header img,nav img,a[href=\"/\"] img{width:175px!important;height:auto!important;max-width:175px!important}"}],"page":{"pagePath":"api-reference/directory/update-directory-user","slug":"/api-reference/directory/update-directory-user","pageMetadata":{"title":"Update directory user","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user","autogeneratedByOpenApi":true},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Update directory user","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"operationId":"DirectoryController_updateDirectoryUser","parameters":["2cb6b107-3c26-48f2-9a77-3dc18e5ab83a"],"requestBody":"d37b213b-67da-4d5f-acc0-2e5732516dfe","responses":{"200":"30b87881-b79a-4fdc-90fa-672c044bc8ce","400":"afb2f01d-913a-4b67-9b3c-516bd1da48da"},"security":["0127ccac-aaff-4ae0-b1f0-761c775d30b9"],"summary":"Update directory user","tags":["Directory"],"method":"patch","type":"path","servers":["687faaa7-d478-42a7-8b2f-e3bf1c3d4068"],"path":"/v1/directory/{id}","baseUrlOptions":["https://api.wirespeed.co"],"title":"Update directory user","description":"","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"2cb6b107-3c26-48f2-9a77-3dc18e5ab83a":{"name":"id","required":true,"in":"path","description":"Directory user ID","schema":{"type":"string","isRequired":true,"description":"Directory user ID","uniqueKey":"","typeLabel":"string"}}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"needsChatOpsWelcome":{"type":"boolean","description":"Whether user needs to receive chat operations welcome message","uniqueKey":"needsChatOpsWelcome","typeLabel":"boolean"},"chatOpsOnboardingUser":{"type":"boolean","description":"Whether user is part of the chat operations onboarding group","uniqueKey":"chatOpsOnboardingUser","typeLabel":"boolean"},"credentialsExposed":{"type":"boolean","description":"Whether user credentials have been exposed","uniqueKey":"credentialsExposed","typeLabel":"boolean"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"needsChatOpsWelcome":true,"chatOpsOnboardingUser":true,"credentialsExposed":true}}},"exampleType":"generated"}},"exampleType":"generated"},"responses":{"30b87881-b79a-4fdc-90fa-672c044bc8ce":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the directory user","isRequired":true,"uniqueKey":"id","typeLabel":"string"},"displayName":{"type":"string","description":"Display name for the user","isRequired":true,"uniqueKey":"displayName","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this user","isRequired":true,"uniqueKey":"teamId","typeLabel":"string"},"additionalEmails":{"description":"Additional email addresses of the user","type":"array","items":{"type":"string","uniqueKey":"additionalEmails.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"additionalEmails","typeLabel":"string[]"},"allEmails":{"description":"All email addresses of the user (primary + additional)","type":"array","items":{"type":"string","uniqueKey":"allEmails.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"allEmails","typeLabel":"string[]"},"createdAt":{"type":"string","description":"Timestamp when the user was created","isRequired":true,"uniqueKey":"createdAt","typeLabel":"string"},"integrationId":{"oneOf":[{"type":"string","description":"ID of the integration this user came from","isRequired":true,"uniqueKey":"integrationId.oneOf.0","typeLabel":"string"},{"type":"null","description":"ID of the integration this user came from","isRequired":true,"uniqueKey":"integrationId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"integrationId","typeLabel":"string | null"},"canonicalClusterEmails":{"description":"Every email address across the whole canonical cluster (this row plus every linked source row), so authentication history reads span all of the directories the person exists in rather than the single source being viewed. Falls back to this row's emails when the row has no cluster.","type":"array","items":{"type":"string","uniqueKey":"canonicalClusterEmails.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"canonicalClusterEmails","typeLabel":"string[]"},"credentialsExposed":{"type":"boolean","description":"Whether the user's credentials have been exposed","isRequired":true,"uniqueKey":"credentialsExposed","typeLabel":"boolean"},"numberCredentialExposures":{"type":"number","description":"Number of times user credentials have been exposed","isRequired":true,"uniqueKey":"numberCredentialExposures","typeLabel":"number"},"containable":{"type":"boolean","description":"Whether the user can be contained via automation. Deprecated — use isUserContainable logic in the containment dialog instead. This is just an alias to user.managed","deprecated":true,"isRequired":true,"uniqueKey":"containable","typeLabel":"boolean"},"smsInviteAttempts":{"type":"number","description":"Number of SMS invite attempts sent","isRequired":true,"uniqueKey":"smsInviteAttempts","typeLabel":"number"},"groups":{"description":"Groups assigned to this user","type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Unique identifier for the user group","isRequired":true,"uniqueKey":"groups.items.[INDEX].id","typeLabel":"string"},"directoryUserId":{"type":"string","description":"ID of the directory user this group belongs to","isRequired":true,"uniqueKey":"groups.items.[INDEX].directoryUserId","typeLabel":"string"},"group":{"type":"string","description":"Type of group assigned to the user","isRequired":true,"uniqueKey":"groups.items.[INDEX].group","typeLabel":"string"},"teamId":{"type":"string","description":"Team ID that owns this group","isRequired":true,"uniqueKey":"groups.items.[INDEX].teamId","typeLabel":"string"},"overriddenByUser":{"type":"boolean","description":"Whether the group was manually overridden by a user","isRequired":true,"uniqueKey":"groups.items.[INDEX].overriddenByUser","typeLabel":"boolean"},"overriddenByUserId":{"oneOf":[{"type":"string","description":"ID of the user who manually overrode the group","isRequired":true,"uniqueKey":"groups.items.[INDEX].overriddenByUserId.oneOf.0","typeLabel":"string"},{"type":"null","description":"ID of the user who manually overrode the group","isRequired":true,"uniqueKey":"groups.items.[INDEX].overriddenByUserId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"groups.items.[INDEX].overriddenByUserId","typeLabel":"string | null"},"overriddenByUserIdentifier":{"oneOf":[{"type":"string","description":"Email of the user who manually overrode the group (persists after user deletion)","isRequired":true,"uniqueKey":"groups.items.[INDEX].overriddenByUserIdentifier.oneOf.0","typeLabel":"string"},{"type":"null","description":"Email of the user who manually overrode the group (persists after user deletion)","isRequired":true,"uniqueKey":"groups.items.[INDEX].overriddenByUserIdentifier.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"groups.items.[INDEX].overriddenByUserIdentifier","typeLabel":"string | null"},"enabled":{"type":"boolean","description":"Whether the group is currently enabled","isRequired":true,"uniqueKey":"groups.items.[INDEX].enabled","typeLabel":"boolean"},"createdAt":{"type":"string","description":"Timestamp when the group was created","isRequired":true,"uniqueKey":"groups.items.[INDEX].createdAt","typeLabel":"string"},"groupId":{"type":"string","description":"Group ID from the group table","isRequired":true,"uniqueKey":"groups.items.[INDEX].groupId","typeLabel":"string"},"groupName":{"type":"string","description":"Display name of the associated group","uniqueKey":"groups.items.[INDEX].groupName","typeLabel":"string"},"groupSlug":{"type":"string","description":"Slug of the associated group","uniqueKey":"groups.items.[INDEX].groupSlug","typeLabel":"string"},"groupContainmentEnabled":{"type":"boolean","description":"Whether the associated group allows containment","uniqueKey":"groups.items.[INDEX].groupContainmentEnabled","typeLabel":"boolean"},"groupChatOpsEnabled":{"type":"boolean","description":"Whether the associated group allows chat ops","uniqueKey":"groups.items.[INDEX].groupChatOpsEnabled","typeLabel":"boolean"},"groupSourceSystemUpdates":{"type":"boolean","description":"Whether the associated group allows outbound updates to the source product","uniqueKey":"groups.items.[INDEX].groupSourceSystemUpdates","typeLabel":"boolean"},"groupAlwaysNotify":{"type":"boolean","description":"Whether the associated group always escalates detections for notification","uniqueKey":"groups.items.[INDEX].groupAlwaysNotify","typeLabel":"boolean"},"groupIcon":{"oneOf":[{"type":"string","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"description":"Chip icon stored on the associated group","x-extensible-enum":true,"uniqueKey":"groups.items.[INDEX].groupIcon.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["bot","users","crown","external-link","pointer","graduation-cap","briefcase","building","dollar-sign","scale","laptop","server","monitor","smartphone","cloud","heart-pulse","factory","code","mail","headphones","network","hard-drive","lock","key","map-pin","globe","tag","mouse-pointer","star","database"],"description":"Chip icon stored on the associated group","x-extensible-enum":true,"uniqueKey":"groups.items.[INDEX].groupIcon.oneOf.1","typeLabel":"null"}],"uniqueKey":"groups.items.[INDEX].groupIcon","typeLabel":"enum\u003cstring> | null"},"groupRuleSearch":{"type":"string","description":"Search expression from the group rule that added this group membership","uniqueKey":"groups.items.[INDEX].groupRuleSearch","typeLabel":"string"},"groupRuleSearchField":{"type":"string","description":"Search field from the group rule that added this group membership","uniqueKey":"groups.items.[INDEX].groupRuleSearchField","typeLabel":"string"},"groupRuleSearchType":{"type":"string","enum":["text","regexp"],"description":"Search type from the group rule that added this group membership","x-extensible-enum":true,"uniqueKey":"groups.items.[INDEX].groupRuleSearchType","typeLabel":"enum\u003cstring>"}},"required":["id","directoryUserId","group","teamId","overriddenByUser","overriddenByUserId","overriddenByUserIdentifier","enabled","createdAt","groupId"],"uniqueKey":"groups.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"groups","typeLabel":"object[]"},"licenses":{"description":"Licenses assigned by this user directory integration","type":"array","items":{"type":"object","properties":{"licenseId":{"type":"string","description":"Integration-provided license identifier","isRequired":true,"uniqueKey":"licenses.items.[INDEX].licenseId","typeLabel":"string"},"licenseName":{"type":"string","description":"Synced license name, falling back to the integration identifier","isRequired":true,"uniqueKey":"licenses.items.[INDEX].licenseName","typeLabel":"string"},"productId":{"oneOf":[{"type":"string","description":"Google Licensing API product identifier when applicable","isRequired":true,"uniqueKey":"licenses.items.[INDEX].productId.oneOf.0","typeLabel":"string"},{"type":"null","description":"Google Licensing API product identifier when applicable","isRequired":true,"uniqueKey":"licenses.items.[INDEX].productId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"licenses.items.[INDEX].productId","typeLabel":"string | null"},"integrationPlatform":{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Source integration","x-extensible-enum":true,"isRequired":true,"uniqueKey":"licenses.items.[INDEX].integrationPlatform","typeLabel":"enum\u003cstring>"}},"required":["licenseId","licenseName","productId","integrationPlatform"],"uniqueKey":"licenses.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"licenses","typeLabel":"object[]"},"onPremises":{"type":"boolean","description":"Whether the identity provider reports the user as synced from on-premises Active Directory","isRequired":true,"uniqueKey":"onPremises","typeLabel":"boolean"},"groupContainmentEnabled":{"type":"boolean","description":"Whether all groups on this user allow containment","isRequired":true,"uniqueKey":"groupContainmentEnabled","typeLabel":"boolean"},"groupChatOpsEnabled":{"type":"boolean","description":"Whether all groups on this user allow chat ops","isRequired":true,"uniqueKey":"groupChatOpsEnabled","typeLabel":"boolean"},"groupSourceSystemUpdates":{"type":"boolean","description":"Whether all groups on this user allow outbound updates to the source product","isRequired":true,"uniqueKey":"groupSourceSystemUpdates","typeLabel":"boolean"},"groupsSynced":{"type":"boolean","description":"Whether this user has had its first round of group checks run","isRequired":true,"uniqueKey":"groupsSynced","typeLabel":"boolean"},"enabled":{"type":"boolean","description":"Whether the user account is enabled","uniqueKey":"enabled","typeLabel":"boolean"},"directoryId":{"type":"string","description":"Directory-specific identifier for the user","uniqueKey":"directoryId","typeLabel":"string"},"name":{"type":"string","description":"Full name of the user","uniqueKey":"name","typeLabel":"string"},"phoneNumber":{"type":"string","description":"Phone number of the user","uniqueKey":"phoneNumber","typeLabel":"string"},"previousPhoneNumber":{"type":"string","description":"Previous phone number if changed","uniqueKey":"previousPhoneNumber","typeLabel":"string"},"title":{"type":"string","description":"Job title of the user","uniqueKey":"title","typeLabel":"string"},"email":{"type":"string","description":"Email address of the user","uniqueKey":"email","typeLabel":"string"},"vip":{"type":"boolean","description":"Whether the user is marked as VIP","uniqueKey":"vip","typeLabel":"boolean"},"nhi":{"type":"boolean","description":"Whether the user is non-human identity (service account)","uniqueKey":"nhi","typeLabel":"boolean"},"financial":{"type":"boolean","description":"Whether the user has financial access/permissions","uniqueKey":"financial","typeLabel":"boolean"},"technical":{"type":"boolean","description":"Whether the user has technical access/permissions","uniqueKey":"technical","typeLabel":"boolean"},"external":{"type":"boolean","description":"Whether the user is external","uniqueKey":"external","typeLabel":"boolean"},"managerDirectoryId":{"type":"string","description":"Directory ID of the user's manager","uniqueKey":"managerDirectoryId","typeLabel":"string"},"managerEmail":{"type":"string","description":"Email address of the user's manager","uniqueKey":"managerEmail","typeLabel":"string"},"domain":{"type":"string","description":"Domain the user belongs to","uniqueKey":"domain","typeLabel":"string"},"department":{"type":"string","description":"Department the user works in","uniqueKey":"department","typeLabel":"string"},"canonicalId":{"oneOf":[{"type":"string","description":"When set, this row is a duplicate source; points at the canonical representative row id","uniqueKey":"canonicalId.oneOf.0","typeLabel":"string"},{"type":"null","description":"When set, this row is a duplicate source; points at the canonical representative row id","uniqueKey":"canonicalId.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalId","typeLabel":"string | null"},"canonicalClusterMemberCount":{"oneOf":[{"type":"number","description":"Child directory user rows in the same canonical cluster (canonical_id = root), excluding the root row; null when there are no children","uniqueKey":"canonicalClusterMemberCount.oneOf.0","typeLabel":"number"},{"type":"null","description":"Child directory user rows in the same canonical cluster (canonical_id = root), excluding the root row; null when there are no children","uniqueKey":"canonicalClusterMemberCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMemberCount","typeLabel":"number | null"},"canonicalClusterMembers":{"oneOf":[{"description":"Preview of other integration-backed rows in the same canonical cluster (at most five children when count exceeds five); null when none","example":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"type":"array","items":{"type":"object","properties":{"id":{"type":"string","description":"Directory user or endpoint id","isRequired":true,"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].id","typeLabel":"string"},"displayLabel":{"type":"string","description":"Display label for the row","isRequired":true,"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].displayLabel","typeLabel":"string"},"integrationId":{"oneOf":[{"type":"string","description":"Integration id for this source row","isRequired":true,"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId.oneOf.0","typeLabel":"string"},{"type":"null","description":"Integration id for this source row","isRequired":true,"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].integrationId","typeLabel":"string | null"},"integrationPlatform":{"oneOf":[{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true,"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true,"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].integrationPlatform","typeLabel":"enum\u003cstring> | null"},"name":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].name.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].name.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].name","typeLabel":"string | null"},"username":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].username.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].username.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].username","typeLabel":"string | null"},"email":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].email.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].email.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].email","typeLabel":"string | null"},"additionalEmails":{"oneOf":[{"type":"array","items":{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.0","typeLabel":"string[]"},{"type":"null","items":{"type":"string"},"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].additionalEmails","typeLabel":"string[] | null"},"roles":{"oneOf":[{"type":"array","items":{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.0","typeLabel":"string[]"},{"type":"null","items":{"type":"string"},"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].roles.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].roles","typeLabel":"string[] | null"},"title":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].title.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].title.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].title","typeLabel":"string | null"},"department":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].department.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].department.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].department","typeLabel":"string | null"},"managed":{"oneOf":[{"type":"boolean","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].managed.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].managed.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].managed","typeLabel":"boolean | null"},"enabled":{"oneOf":[{"type":"boolean","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].enabled.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].enabled.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].enabled","typeLabel":"boolean | null"},"createdAt":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].createdAt","typeLabel":"string | null"},"updatedAt":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].updatedAt","typeLabel":"string | null"},"live":{"oneOf":[{"type":"boolean","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].live.oneOf.0","typeLabel":"boolean"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].live.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].live","typeLabel":"boolean | null"},"operatingSystem":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].operatingSystem","typeLabel":"string | null"},"privateIpAddress":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].privateIpAddress","typeLabel":"string | null"},"publicIpAddress":{"oneOf":[{"type":"string","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX].publicIpAddress","typeLabel":"string | null"}},"required":["id","displayLabel","integrationId"],"uniqueKey":"canonicalClusterMembers.oneOf.0.items.[INDEX]","typeLabel":"object"},"uniqueKey":"canonicalClusterMembers.oneOf.0","typeLabel":"object[]"},{"description":"Preview of other integration-backed rows in the same canonical cluster (at most five children when count exceeds five); null when none","example":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"type":"null","items":{"type":"object","properties":{"id":{"type":"string","description":"Directory user or endpoint id"},"displayLabel":{"type":"string","description":"Display label for the row"},"integrationId":{"oneOf":[{"type":"string","description":"Integration id for this source row"},{"type":"null","description":"Integration id for this source row"}]},"integrationPlatform":{"oneOf":[{"type":"string","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true},{"type":"null","enum":["acronis","action1","admin-by-request","agger-labs","anthropic","aws","axonius","barracuda-cloudgen-firewall","bitwarden","box","checkpoint-firewall","checkpoint-harmony","cisco-asa","cisco-catalyst","cisco-duo","cisco-meraki","cisco-secure-access","cisco-secure-endpoint","cisco-umbrella","cloudflare","connectwise-psa","crowdstrike-falcon","cursor","cyberark","darktrace","darktrace-email-security","datto-edr","dfir-iris","email","exium","fleet-dm","fortianalyzer","fortinet","freshservice","generic-json","generic-syslog","github","github-enterprise-cloud","google-alert-center","google-chronicle","google-cloud-audit-logs","google-directory","google-security-center","halcyon","halo-itsm","have-i-been-pwned","horizon3","hyas-protect","ipinfo","jamf-internet-security","jamf-pro","jamf-protect","jira-cloud","jira-data-center","jumpcloud","kandji","manage-engine-ad-audit-plus","microsoft","microsoft-entra","microsoft-teams","microsoft-teams-v2","mimecast","netskope","ninjaone","odoo-helpdesk","okta","one-password","onelogin","openai","openvpn-access-server","orca-security","pager-duty","palo-alto-networks-cortex","palo-alto-ngfw","perception-point","pfsense","picus","ping-one","proofpoint","reversing-labs","safebreach","sandfly","sentinel-one","service-now","slack","sms","smtp","sonic-wall","sophos","sophos-firewall","splunk","stairwell","sublime-security","tenable-nessus","thinkst-canary","threatlocker","three-cx","tracebit","unifi","upwind","varonis-datadvantage","vectra","vmware-vsphere","watchguard-firebox","windows-event-logs","wirespeed","wiz","wordfence","zabbix","zscaler-zpa"],"description":"Integration platform when joined from integration table","x-extensible-enum":true}]},"name":{"oneOf":[{"type":"string"},{"type":"null"}]},"username":{"oneOf":[{"type":"string"},{"type":"null"}]},"email":{"oneOf":[{"type":"string"},{"type":"null"}]},"additionalEmails":{"oneOf":[{"type":"array","items":{"type":"string"}},{"type":"null","items":{"type":"string"}}]},"roles":{"oneOf":[{"type":"array","items":{"type":"string"}},{"type":"null","items":{"type":"string"}}]},"title":{"oneOf":[{"type":"string"},{"type":"null"}]},"department":{"oneOf":[{"type":"string"},{"type":"null"}]},"managed":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"enabled":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"createdAt":{"oneOf":[{"type":"string"},{"type":"null"}]},"updatedAt":{"oneOf":[{"type":"string"},{"type":"null"}]},"live":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"operatingSystem":{"oneOf":[{"type":"string"},{"type":"null"}]},"privateIpAddress":{"oneOf":[{"type":"string"},{"type":"null"}]},"publicIpAddress":{"oneOf":[{"type":"string"},{"type":"null"}]}},"required":["id","displayLabel","integrationId"]},"uniqueKey":"canonicalClusterMembers.oneOf.1","typeLabel":"null"}],"uniqueKey":"canonicalClusterMembers","typeLabel":"object[] | null"},"roles":{"oneOf":[{"description":"Roles assigned to the user","type":"array","items":{"type":"string","uniqueKey":"roles.oneOf.0.items.[INDEX]","typeLabel":"string"},"uniqueKey":"roles.oneOf.0","typeLabel":"string[]"},{"description":"Roles assigned to the user","type":"null","items":{"type":"string"},"uniqueKey":"roles.oneOf.1","typeLabel":"null"}],"uniqueKey":"roles","typeLabel":"string[] | null"},"lastCredentialExposure":{"oneOf":[{"type":"string","description":"Timestamp of the last credential exposure","uniqueKey":"lastCredentialExposure.oneOf.0","typeLabel":"string"},{"type":"null","description":"Timestamp of the last credential exposure","uniqueKey":"lastCredentialExposure.oneOf.1","typeLabel":"null"}],"uniqueKey":"lastCredentialExposure","typeLabel":"string | null"},"lastCheckedForCredentialExposures":{"oneOf":[{"type":"string","description":"Timestamp when last checked for credential exposures","uniqueKey":"lastCheckedForCredentialExposures.oneOf.0","typeLabel":"string"},{"type":"null","description":"Timestamp when last checked for credential exposures","uniqueKey":"lastCheckedForCredentialExposures.oneOf.1","typeLabel":"null"}],"uniqueKey":"lastCheckedForCredentialExposures","typeLabel":"string | null"},"needsChatOpsWelcome":{"type":"boolean","description":"Whether user needs to receive chat operations welcome message","uniqueKey":"needsChatOpsWelcome","typeLabel":"boolean"},"contained":{"type":"boolean","description":"Whether the user is currently contained","uniqueKey":"contained","typeLabel":"boolean"},"username":{"type":"string","description":"Username for the user account","uniqueKey":"username","typeLabel":"string"},"smsConsentReceivedAt":{"oneOf":[{"type":"string","description":"Timestamp when SMS consent was received","uniqueKey":"smsConsentReceivedAt.oneOf.0","typeLabel":"string"},{"type":"null","description":"Timestamp when SMS consent was received","uniqueKey":"smsConsentReceivedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"smsConsentReceivedAt","typeLabel":"string | null"},"smsInviteLastSentAt":{"type":"string","description":"Timestamp of last SMS invite sent","uniqueKey":"smsInviteLastSentAt","typeLabel":"string"},"smsInviteOptOut":{"type":"boolean","description":"Whether user opted out of SMS invites","uniqueKey":"smsInviteOptOut","typeLabel":"boolean"},"administrator":{"type":"boolean","description":"Whether the user has administrative privileges","uniqueKey":"administrator","typeLabel":"boolean"},"updatedAt":{"type":"string","description":"Timestamp when the user was last updated","uniqueKey":"updatedAt","typeLabel":"string"},"passwordLastChangedAt":{"type":"string","description":"Timestamp when password was last changed","uniqueKey":"passwordLastChangedAt","typeLabel":"string"},"lastSignInAt":{"type":"string","description":"Timestamp of the user's last sign-in","uniqueKey":"lastSignInAt","typeLabel":"string"},"raw":{"type":"object","description":"Raw data from the directory source","uniqueKey":"raw","typeLabel":"object"},"managed":{"type":"boolean","description":"Whether the user is managed by an integration","uniqueKey":"managed","typeLabel":"boolean"},"chatOpsOnboardingUser":{"type":"boolean","description":"Whether the user is in the chat ops onboarding group","uniqueKey":"chatOpsOnboardingUser","typeLabel":"boolean"},"verifiedPhoneNumber":{"type":"string","description":"Verified phone number of the user","uniqueKey":"verifiedPhoneNumber","typeLabel":"string"},"emailDirection":{"type":"string","enum":["sender","receiver"],"description":"Email direction when user is associated with an email detection","x-extensible-enum":true,"uniqueKey":"emailDirection","typeLabel":"enum\u003cstring>"},"sourceDispositions":{"type":"array","description":"Actions the source product reported taking on this asset for the detection","items":{"type":"string","enum":["BLOCKED","QUARANTINED","KILLED","REMEDIATED","ISOLATED","PASSWORD_RESET","ACTION_FAILED"],"x-extensible-enum":true,"uniqueKey":"sourceDispositions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"sourceDispositions","typeLabel":"enum\u003cstring>[]"}},"required":["id","displayName","teamId","additionalEmails","allEmails","createdAt","integrationId","canonicalClusterEmails","credentialsExposed","numberCredentialExposures","containable","smsInviteAttempts","groups","licenses","onPremises","groupContainmentEnabled","groupChatOpsEnabled","groupSourceSystemUpdates","groupsSynced"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"id":"\u003cstring>","displayName":"\u003cstring>","teamId":"\u003cstring>","additionalEmails":["\u003cstring>"],"allEmails":["\u003cstring>"],"createdAt":"\u003cstring>","integrationId":"\u003cstring>","canonicalClusterEmails":["\u003cstring>"],"credentialsExposed":true,"numberCredentialExposures":123,"containable":true,"smsInviteAttempts":123,"groups":[{"id":"\u003cstring>","directoryUserId":"\u003cstring>","group":"\u003cstring>","teamId":"\u003cstring>","overriddenByUser":true,"overriddenByUserId":"\u003cstring>","overriddenByUserIdentifier":"\u003cstring>","enabled":true,"createdAt":"\u003cstring>","groupId":"\u003cstring>","groupName":"\u003cstring>","groupSlug":"\u003cstring>","groupContainmentEnabled":true,"groupChatOpsEnabled":true,"groupSourceSystemUpdates":true,"groupAlwaysNotify":true,"groupIcon":"bot","groupRuleSearch":"\u003cstring>","groupRuleSearchField":"\u003cstring>","groupRuleSearchType":"text"}],"licenses":[{"licenseId":"\u003cstring>","licenseName":"\u003cstring>","productId":"\u003cstring>","integrationPlatform":"acronis"}],"onPremises":true,"groupContainmentEnabled":true,"groupChatOpsEnabled":true,"groupSourceSystemUpdates":true,"groupsSynced":true,"enabled":true,"directoryId":"\u003cstring>","name":"\u003cstring>","phoneNumber":"\u003cstring>","previousPhoneNumber":"\u003cstring>","title":"\u003cstring>","email":"\u003cstring>","vip":true,"nhi":true,"financial":true,"technical":true,"external":true,"managerDirectoryId":"\u003cstring>","managerEmail":"\u003cstring>","domain":"\u003cstring>","department":"\u003cstring>","canonicalId":"\u003cstring>","canonicalClusterMemberCount":123,"canonicalClusterMembers":[{"id":"22222222-2222-2222-2222-222222222201","displayLabel":"WS-SAMPLE-BRAVO-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0002","integrationPlatform":"sentinel-one","name":"WS-SAMPLE-BRAVO-WKS$","managed":true,"live":true,"operatingSystem":"Windows11 - 23H2","createdAt":"2025-01-02T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"},{"id":"22222222-2222-2222-2222-222222222202","displayLabel":"WS-SAMPLE-CHARLIE-WKS$","integrationId":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeee0003","integrationPlatform":"crowdstrike-falcon","name":"WS-SAMPLE-CHARLIE-WKS$","managed":true,"live":true,"operatingSystem":"Windows 10 Enterprise 22H2 (OS build 19045.4046)","createdAt":"2025-01-03T00:00:00.000Z","updatedAt":"2025-01-15T12:00:00.000Z"}],"roles":["\u003cstring>"],"lastCredentialExposure":"\u003cstring>","lastCheckedForCredentialExposures":"\u003cstring>","needsChatOpsWelcome":true,"contained":true,"username":"\u003cstring>","smsConsentReceivedAt":"\u003cstring>","smsInviteLastSentAt":"\u003cstring>","smsInviteOptOut":true,"administrator":true,"updatedAt":"\u003cstring>","passwordLastChangedAt":"\u003cstring>","lastSignInAt":"\u003cstring>","raw":{},"managed":true,"chatOpsOnboardingUser":true,"verifiedPhoneNumber":"\u003cstring>","emailDirection":"sender","sourceDispositions":["BLOCKED"]}}},"exampleType":"generated"}},"exampleType":"generated"},"afb2f01d-913a-4b67-9b3c-516bd1da48da":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"statusCode":{"type":"number","isRequired":true,"uniqueKey":"statusCode","typeLabel":"number"},"code":{"type":"string","description":"Stable machine-readable error code. Clients should branch and translate on this instead of `message`.","uniqueKey":"code","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the message for `code`.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"params.additionalProperties","typeLabel":"string | number | boolean | null"},"uniqueKey":"params","typeLabel":"object"},"validationErrors":{"description":"Per-property failures when `code` is `VALIDATION_FAILED` from request validation.","type":"array","items":{"type":"object","properties":{"property":{"type":"string","description":"Dotted path of the invalid property.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].property","typeLabel":"string"},"constraint":{"type":"string","description":"class-validator constraint name; clients translate `errors:validation.\u003cconstraint>`.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].constraint","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the constraint message.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties","typeLabel":"string | number | boolean | null"},"isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].params","typeLabel":"object"},"code":{"type":"string","description":"Catalog code overriding the constraint translation.","uniqueKey":"validationErrors.items.[INDEX].code","typeLabel":"string"}},"required":["property","constraint","params"],"uniqueKey":"validationErrors.items.[INDEX]","typeLabel":"object"},"uniqueKey":"validationErrors","typeLabel":"object[]"}},"required":["message","statusCode"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"message":"\u003cstring>","statusCode":123,"code":"\u003cstring>","params":{},"validationErrors":[{"property":"\u003cstring>","constraint":"\u003cstring>","params":{},"code":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"0127ccac-aaff-4ae0-b1f0-761c775d30b9":{"bearer":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"}}},"servers":{"687faaa7-d478-42a7-8b2f-e3bf1c3d4068":{"url":"https://api.wirespeed.co"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"bearer","name":"Authorization"}],"title":"bearer"}]},"originalFileLocation":"https://api.wirespeed.co/v1/openapi.json"},"subdomain":"wirespeed","siteName":"Wirespeed","title":"Update directory user - Wirespeed","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{"en":{"href":"/api-reference/directory/update-directory-user","matchLevel":0},"fr":{"href":"/api-reference/directory/update-directory-user","matchLevel":0},"de":{"href":"/api-reference/directory/update-directory-user","matchLevel":0}}},"lastModified":"2026-11-06T19:45:30.412Z","originalFileLocation":"api-reference/directory/update-directory-user.mdx","locale":"en"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"application-name\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Update directory user - Wirespeed\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Wirespeed\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.wirespeed.co/api-reference/directory/update-directory-user\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Directory\u0026amp;title=Update+directory+user\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=cfb8b92641b0756fd025d9efbc42d95e4c043ebfc80801908c30525cac1cd092\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Update directory user - Wirespeed\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://wirespeed.mintlify.site/_mintlify/api/og/v2?division=Directory\u0026amp;title=Update+directory+user\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=cfb8b92641b0756fd025d9efbc42d95e4c043ebfc80801908c30525cac1cd092\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#8B5CF6\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.wirespeed.co/api-reference/directory/update-directory-user\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/directory/update-directory-user.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.wirespeed.co/#organization\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.wirespeed.co#website\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user#webpage\",\"url\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user\",\"name\":\"Update directory user\",\"dateModified\":\"2026-11-06T19:45:30.412Z\",\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"},\"breadcrumb\":{\"@id\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Endpoints\",\"item\":\"https://docs.wirespeed.co/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Directory\",\"item\":\"https://docs.wirespeed.co/api-reference/directory/get-directory-user-statistics\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Update directory user\",\"item\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user#apireference\",\"headline\":\"Update directory user\",\"name\":\"Update directory user\",\"url\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user\",\"mainEntityOfPage\":{\"@id\":\"https://docs.wirespeed.co/api-reference/directory/update-directory-user#webpage\"},\"dateModified\":\"2026-11-06T19:45:30.412Z\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Wirespeed\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Wirespeed","nav":{"global":null,"languages":[{"language":"en","default":true,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/introduction"}]},{"anchor":"API Reference","icon":"code","groups":[{"group":"Getting Started","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpoints","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","description":"Returns total count of directory users matching the same filters as the search endpoint. Use this for pagination totalCount without running the count in the search query.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Changelog","icon":"history","pages":[{"title":"Changelog","href":"/changelog"}]}]},{"language":"fr","navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/fr/introduction"}]},{"anchor":"Référence de l’API","icon":"code","groups":[{"group":"Prise en main","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Points de terminaison","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","description":"Returns total count of directory users matching the same filters as the search endpoint. Use this for pagination totalCount without running the count in the search query.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Journal des modifications","icon":"history","pages":[{"title":"Journal des modifications","href":"/changelog"}]}]},{"language":"de","navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"hidden":false,"anchors":[{"anchor":"Dokumentation","icon":"book-open","pages":[{"title":"Dokumentation","href":"/de/introduction"}]},{"anchor":"API-Referenz","icon":"code","groups":[{"group":"Erste Schritte","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpunkte","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"},{"title":"List risk portal webhooks","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook","href":"/api-reference/notification/list-risk-portal-webhooks"},{"title":"Create risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/risk-portal-webhook","href":"/api-reference/notification/create-risk-portal-webhook"},{"title":"List risk portal webhook delivery history","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/notification/risk-portal-webhook/{id}/history","href":"/api-reference/notification/list-risk-portal-webhook-delivery-history"},{"title":"Delete risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/delete-risk-portal-webhook"},{"title":"Update risk portal webhook","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/notification/risk-portal-webhook/{id}","href":"/api-reference/notification/update-risk-portal-webhook"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add API key integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/api-key","href":"/api-reference/integration/add-api-key-integration"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /auth/team","href":"/api-reference/authentication/switch-to-a-different-team"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all","href":"/api-reference/team/get-all-teams"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","description":"Returns total count of directory users matching the same filters as the search endpoint. Use this for pagination totalCount without running the count in the search query.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/stats","href":"/api-reference/endpoint/get-endpoint-statistics"},{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Änderungsprotokoll","icon":"history","pages":[{"title":"Änderungsprotokoll","href":"/changelog"}]}]}]},"basePath":"","title":"Update directory user - Wirespeed","buildId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","deploymentId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-i2a3QZ8E.js","utils-ChLwp8m0.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DRktVTDc.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-CA2pEs4T.js","snippetPresets-ClQ6XrKD.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-Ct_Lv36y.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-Cn2PYw9e.js","shallow-rkyymjXQ.js","getApiPlaygroundDisplay-BB9vkXtE.js","CodeSnippet-Bm5RU7m1.js","CodeSnippets-BgU9Deuz.js","Page-BUDYNlhG.js","getPastedJson-BD-6NNum.js","icon-8Z6tud2e.js","MethodPill-Tuzr4g3V.js","DuplicateIcon-0ceWFYhN.js","createIcon-FBXow_ST.js","DynamicMarkdown-CD8713Yy.js","SectionHeading-7zgzQbH-.js","axios-vUo_bRtp.js","Markdown-D7Ofw1oz.js","clsx-eKJ4rcii.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CwjSCXIK.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-9EK5IAXV.js"]}