POST
/
team
/
statistics
Get team statistics report
curl --request POST \
  --url https://api.wirespeed.co/team/statistics \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "days": 123
}'
{
  "escalatedDetections": 123,
  "totalDetections": 123,
  "chatOpsDetections": 123,
  "containmentDetections": 123,
  "potentialChatOpsDetections": 123,
  "potentialContainmentDetections": 123,
  "potentialEscalatedDetections": 123,
  "automaticallyClosed": 123,
  "confirmedMalicious": 123,
  "verdictedMalicious": 123,
  "truePositiveDetections": 123,
  "historicDetections": 123,
  "falsePositiveDetections": 123,
  "billableUsers": 123,
  "billableEndpoints": 123,
  "operatingSystems": [
    {
      "operatingSystem": "<string>",
      "count": 123
    }
  ],
  "detectionLocations": [
    {
      "country": "<string>",
      "count": 123
    }
  ],
  "suspiciousLoginLocations": [
    {
      "country": "<string>",
      "count": 123
    }
  ],
  "ocsfStatistics": [
    {
      "integration": {
        "id": "<string>",
        "platform": "microsoft-teams",
        "enabled": true,
        "teamId": "<string>",
        "teamName": "<string>",
        "config": {
          "authType": "oauth2",
          "name": "<string>",
          "oauthRequiresRedirect": true,
          "customFields": [
            {
              "slug": "<string>",
              "display": "<string>",
              "type": "<string>",
              "required": true,
              "description": "<string>",
              "validationPattern": "<string>",
              "validationMinLength": 123,
              "validationMaxLength": 123,
              "source": "<string>",
              "advancedOption": true
            }
          ],
          "requiresConfiguration": true,
          "logo": "<string>",
          "logoLight": "<string>",
          "logoDark": "<string>",
          "beta": true,
          "description": "<string>",
          "slug": "<string>",
          "internalCreds": true,
          "docsUrl": "<string>",
          "default": true,
          "rtfm": true,
          "useCases": [
            "chat_ops"
          ],
          "webhookActions": [
            {
              "slug": "<string>",
              "display": "<string>",
              "description": "<string>",
              "useCases": [
                "chat_ops"
              ]
            }
          ]
        },
        "permissionsUpdateAvailable": true,
        "permissionUpdateExplanation": "<string>",
        "requiresConfiguration": "<string>",
        "identityFields": {}
      },
      "totalEvents": 123,
      "totalBytes": 123
    }
  ]
}

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
days
number

Number of days for statistics calculation

Response

escalatedDetections
number
required

Number of detections that were escalated

totalDetections
number
required

Total number of detections

chatOpsDetections
number
required

Number of detections handled via chat operations

containmentDetections
number
required

Number of detections that resulted in containment

potentialChatOpsDetections
number
required

Number of detections that could potentially use chat operations

potentialContainmentDetections
number
required

Number of detections that could potentially be contained

potentialEscalatedDetections
number
required

Number of detections that could potentially be escalated

automaticallyClosed
number
required

Number of detections automatically closed

confirmedMalicious
number
required

Number of detections confirmed as malicious

verdictedMalicious
number
required

Number of detections with malicious verdict

truePositiveDetections
number
required

Number of true positive detections

historicDetections
number
required

Number of historic detections

falsePositiveDetections
number
required

Number of false positive detections

billableUsers
number
required

Number of billable users

billableEndpoints
number
required

Number of billable endpoints

operatingSystems
object[]
required

Operating system distribution statistics

detectionLocations
object[]
required

Detection location statistics

suspiciousLoginLocations
object[]
required

Suspicious login location statistics

ocsfStatistics
object[]
required

OCSF event statistics by integration