{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Wirespeed","colors":{"primary":"#8B5CF6","light":"#8B5CF6","dark":"#8B5CF6"},"logo":{"light":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c","dark":"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-dark.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=417d1d1996a8bb6674c9333da34ba256"},"favicon":"https://mintcdn.com/wirespeed/W6Ho2vhJrlRtLlBr/favicon.svg?fit=max\u0026auto=format\u0026n=W6Ho2vhJrlRtLlBr\u0026q=85\u0026s=ca5a14e92c415079a7c4742d16482b88","navbar":{"primary":{"type":"button","label":"Back to Wirespeed","href":"https://app.wirespeed.co"}},"footer":{"socials":{"x":"https://x.com/_wirespeed","github":"https://github.com/wirespeedsecurity","linkedin":"https://linkedin.com/company/wirespeedsecurity"}},"icons":{"library":"lucide"},"contextual":{"options":["copy","view","chatgpt","claude"],"display":"header"},"styling":{"latex":false},"navigation":{"languages":[{"language":"en","default":true,"href":"introduction"},{"language":"fr","hidden":true,"navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"href":"fr/introduction"},{"language":"de","hidden":true,"navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"href":"de/introduction"}]}},"deployment":{"deploymentMetadataValue":{"subdomain":"wirespeed","hasAudioNarration":false,"actualSubdomain":"wirespeed","customDomains":["docs.wirespeed.co"],"gitSource":{"type":"github","owner":"binaryedge","repo":"wirespeed-app","deployBranch":"main","contentDirectory":"apps/documentation","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ada60fa649217a4405d130c","collectionId":"c8e2bf42-d439-4d97-9526-2363b10eadd7","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ada60fa649217a4405d130c"},"entitlements":{},"buildId":"6ada60fa649217a4405d130c","clientVersion":"0.0.3964","searchFilterCounts":[{"language":"en","tag":"Documentation","count":126},{"language":"en","tag":"Integrations","count":97},{"language":"en","tag":"Assets","count":7},{"language":"en","tag":"Remediation","count":5},{"language":"en","tag":"Events","count":4},{"language":"en","tag":"Settings","count":4},{"language":"en","tag":"Chat Ops","count":3},{"language":"en","tag":"Get Started","count":3},{"language":"en","tag":"Custom Detections","count":2},{"language":"en","tag":"Exclusions","count":1}]},"assistantConfig":{},"hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-v7-file-tree","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"pause-universal-search-reconcile","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"per-site-search-delta","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-private-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-nav-generations","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-agent-model-picker","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"isAtlas":false,"googleFontsInlined":false},"customCss":[{"filePath":"styles.css","content":"a[href=\"/\"] img,header img,img[src*=logo],nav img{width:175px!important;height:auto!important;max-width:175px!important}"}],"page":{"pagePath":"api-reference/verdict/get-all-verdict-rules","slug":"/api-reference/verdict/get-all-verdict-rules","pageMetadata":{"title":"Get all verdict rules","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules","autogeneratedByOpenApi":true,"hidden":true},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Get all verdict rules","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules","autogeneratedByOpenApi":true,"hidden":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"operationId":"VerdictController_getAllRules","parameters":[],"responses":{"200":"129532e5-ca92-4b30-b3db-a3c214a2b63b","400":"8f1ccffd-d3e8-4690-b1cf-6c86367268ab"},"security":["51b1026e-7763-47f6-9768-6dacd2df2fe2"],"summary":"Get all verdict rules","tags":["Verdict"],"method":"get","type":"path","servers":["ab86667f-e333-4da2-8891-2f502037c913"],"path":"/verdict/rules","baseUrlOptions":["https://api.wirespeed.co"],"title":"Get all verdict rules","description":"","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{},"responses":{"129532e5-ca92-4b30-b3db-a3c214a2b63b":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"rules":{"type":"array","items":{"type":"object","properties":{"stage":{"type":"string","enum":["TRIAGE","HUNT","MONITOR"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"rules.items.[INDEX].stage","typeLabel":"enum\u003cstring>"},"default":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].default","typeLabel":"boolean"},"managedByWspd":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].managedByWspd","typeLabel":"boolean"},"category":{"type":"string","enum":["OTHER__DIAGNOSTIC","OTHER__INFORMATIONAL_EVENT","OTHER__WARNING","OTHER__EXPERIMENTAL","OTHER__UNKNOWN","OTHER__DECEPTION","OTHER__DECEPTION__SIMULATION","OTHER__CUSTOM_DETECTION","CLOUD__INVOCATION","CLOUD__DISCOVERY","CLOUD__DATA_TRANSFER","CLOUD__PERSISTENCE","CLOUD__PUBLIC_BUCKET","ENDPOINT__DISCOVERY","ENDPOINT__EXECUTION","ENDPOINT__LIVE_OFF_THE_LAND","ENDPOINT__NUISANCE","ENDPOINT__MALWARE_DISCOVERY","ENDPOINT__MALWARE_EXECUTION","ENDPOINT__LATE_STAGE","ENDPOINT__PERSISTENCE","ENDPOINT__REMOTE_MANAGEMENT","ENDPOINT__LATERAL_MOVEMENT","ENDPOINT__IMPACT","ENDPOINT__EVASION","ENDPOINT__EXPLOITATION","ENDPOINT__SIMULATION","ENDPOINT__PLANNED_CHANGE","IDENTITY__LOGIN","IDENTITY__REJECTED_MFA","IDENTITY__DISCOVERY","IDENTITY__BRUTE_FORCE","IDENTITY__PUBLIC_CREDENTIAL_EXPOSURE","IDENTITY__PRIVATE_CREDENTIAL_EXPOSURE","IDENTITY__PERSISTENCE","IDENTITY__ACCOUNT_COMPROMISE","IDENTITY__OAUTH_GRANT","IDENTITY__SIMULATION","IDENTITY__PLANNED_CHANGE","NETWORK__INBOUND_CONNECTION","NETWORK__OUTBOUND_CONNECTION","NETWORK__PHISHING","NETWORK__NOISY","NETWORK__DISCOVERY","EMAIL__PHISHING","EMAIL__PHISHING_REPORTED","EMAIL__EVASION","EMAIL__MALWARE","EMAIL__MALICIOUS_LINK","EMAIL__GRAYMAIL","EMAIL__SPAM","EMAIL__BUSINESS_EMAIL_COMPROMISE","EMAIL__MAILBOX_RULE","DATA__DATA_TRANSFER","DATA__DATA_SHARE","POSTURE__POSTURE","POSTURE__HEALTH"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"rules.items.[INDEX].category","typeLabel":"enum\u003cstring>"},"wspdRule":{"type":"string","isRequired":true,"uniqueKey":"rules.items.[INDEX].wspdRule","typeLabel":"string"},"retired":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].retired","typeLabel":"boolean"},"escalate":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].escalate","typeLabel":"boolean"},"chatOps":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].chatOps","typeLabel":"boolean"},"close":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].close","typeLabel":"boolean"},"disabled":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].disabled","typeLabel":"boolean"},"containUserActions":{"type":"array","items":{"type":"string","enum":["disable","reset_mfa","reset_password","revoke_sessions"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].containUserActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"isRequired":true,"uniqueKey":"rules.items.[INDEX].containUserActions","typeLabel":"enum\u003cstring>[]"},"containEndpointActions":{"type":"array","items":{"type":"string","enum":["isolate","lock"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].containEndpointActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"isRequired":true,"uniqueKey":"rules.items.[INDEX].containEndpointActions","typeLabel":"enum\u003cstring>[]"},"containFileActions":{"type":"array","items":{"type":"string","enum":["delete","quarantine"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].containFileActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"isRequired":true,"uniqueKey":"rules.items.[INDEX].containFileActions","typeLabel":"enum\u003cstring>[]"},"containMailboxRuleActions":{"type":"array","items":{"type":"string","enum":["delete"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].containMailboxRuleActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"isRequired":true,"uniqueKey":"rules.items.[INDEX].containMailboxRuleActions","typeLabel":"enum\u003cstring>[]"},"uncontainUserActions":{"type":"array","items":{"type":"string","enum":["enable"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].uncontainUserActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"isRequired":true,"uniqueKey":"rules.items.[INDEX].uncontainUserActions","typeLabel":"enum\u003cstring>[]"},"uncontainEndpointActions":{"type":"array","items":{"type":"string","enum":["unisolate","unlock"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].uncontainEndpointActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"isRequired":true,"uniqueKey":"rules.items.[INDEX].uncontainEndpointActions","typeLabel":"enum\u003cstring>[]"},"uncontainFileActions":{"type":"array","items":{"type":"string","enum":["unquarantine"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].uncontainFileActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"isRequired":true,"uniqueKey":"rules.items.[INDEX].uncontainFileActions","typeLabel":"enum\u003cstring>[]"},"chatOpsMFA":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].chatOpsMFA","typeLabel":"boolean"},"monitor":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].monitor","typeLabel":"boolean"},"vipChatOps":{"type":"boolean","isRequired":true,"uniqueKey":"rules.items.[INDEX].vipChatOps","typeLabel":"boolean"},"chatOpsUnsureVerdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"rules.items.[INDEX].chatOpsUnsureVerdict","typeLabel":"enum\u003cstring>"},"description":{"type":"string","isRequired":true,"uniqueKey":"rules.items.[INDEX].description","typeLabel":"string"},"severity":{"type":"string","enum":["INFORMATIONAL","LOW","MEDIUM","HIGH","CRITICAL"],"x-extensible-enum":true,"isRequired":true,"uniqueKey":"rules.items.[INDEX].severity","typeLabel":"enum\u003cstring>"},"id":{"type":"string","uniqueKey":"rules.items.[INDEX].id","typeLabel":"string"},"monitorFallbackPreset":{"type":"string","enum":["ESCALATE","ESCALATE_CONTAIN","CLOSE"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].monitorFallbackPreset","typeLabel":"enum\u003cstring>"},"createdAt":{"type":"string","uniqueKey":"rules.items.[INDEX].createdAt","typeLabel":"string"},"updatedAt":{"type":"string","uniqueKey":"rules.items.[INDEX].updatedAt","typeLabel":"string"},"teamId":{"type":"string","uniqueKey":"rules.items.[INDEX].teamId","typeLabel":"string"},"chatOpsTimeoutVerdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].chatOpsTimeoutVerdict","typeLabel":"enum\u003cstring>"},"chatOpsTimeoutMonitor":{"type":"boolean","uniqueKey":"rules.items.[INDEX].chatOpsTimeoutMonitor","typeLabel":"boolean"},"chatOpsTimeoutClose":{"type":"boolean","uniqueKey":"rules.items.[INDEX].chatOpsTimeoutClose","typeLabel":"boolean"},"verdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].verdict","typeLabel":"enum\u003cstring>"},"managedByParent":{"type":"boolean","uniqueKey":"rules.items.[INDEX].managedByParent","typeLabel":"boolean"},"useSourceSeverity":{"type":"boolean","uniqueKey":"rules.items.[INDEX].useSourceSeverity","typeLabel":"boolean"},"ignoresRemediation":{"type":"boolean","uniqueKey":"rules.items.[INDEX].ignoresRemediation","typeLabel":"boolean"},"defaults":{"oneOf":[{"type":"object","properties":{"id":{"type":"string","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.id","typeLabel":"string"},"stage":{"type":"string","enum":["TRIAGE","HUNT","MONITOR"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.stage","typeLabel":"enum\u003cstring>"},"default":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.default","typeLabel":"boolean"},"managedByWspd":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.managedByWspd","typeLabel":"boolean"},"category":{"type":"string","enum":["OTHER__DIAGNOSTIC","OTHER__INFORMATIONAL_EVENT","OTHER__WARNING","OTHER__EXPERIMENTAL","OTHER__UNKNOWN","OTHER__DECEPTION","OTHER__DECEPTION__SIMULATION","OTHER__CUSTOM_DETECTION","CLOUD__INVOCATION","CLOUD__DISCOVERY","CLOUD__DATA_TRANSFER","CLOUD__PERSISTENCE","CLOUD__PUBLIC_BUCKET","ENDPOINT__DISCOVERY","ENDPOINT__EXECUTION","ENDPOINT__LIVE_OFF_THE_LAND","ENDPOINT__NUISANCE","ENDPOINT__MALWARE_DISCOVERY","ENDPOINT__MALWARE_EXECUTION","ENDPOINT__LATE_STAGE","ENDPOINT__PERSISTENCE","ENDPOINT__REMOTE_MANAGEMENT","ENDPOINT__LATERAL_MOVEMENT","ENDPOINT__IMPACT","ENDPOINT__EVASION","ENDPOINT__EXPLOITATION","ENDPOINT__SIMULATION","ENDPOINT__PLANNED_CHANGE","IDENTITY__LOGIN","IDENTITY__REJECTED_MFA","IDENTITY__DISCOVERY","IDENTITY__BRUTE_FORCE","IDENTITY__PUBLIC_CREDENTIAL_EXPOSURE","IDENTITY__PRIVATE_CREDENTIAL_EXPOSURE","IDENTITY__PERSISTENCE","IDENTITY__ACCOUNT_COMPROMISE","IDENTITY__OAUTH_GRANT","IDENTITY__SIMULATION","IDENTITY__PLANNED_CHANGE","NETWORK__INBOUND_CONNECTION","NETWORK__OUTBOUND_CONNECTION","NETWORK__PHISHING","NETWORK__NOISY","NETWORK__DISCOVERY","EMAIL__PHISHING","EMAIL__PHISHING_REPORTED","EMAIL__EVASION","EMAIL__MALWARE","EMAIL__MALICIOUS_LINK","EMAIL__GRAYMAIL","EMAIL__SPAM","EMAIL__BUSINESS_EMAIL_COMPROMISE","EMAIL__MAILBOX_RULE","DATA__DATA_TRANSFER","DATA__DATA_SHARE","POSTURE__POSTURE","POSTURE__HEALTH"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.category","typeLabel":"enum\u003cstring>"},"wspdRule":{"type":"string","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.wspdRule","typeLabel":"string"},"retired":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.retired","typeLabel":"boolean"},"escalate":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.escalate","typeLabel":"boolean"},"chatOps":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.chatOps","typeLabel":"boolean"},"close":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.close","typeLabel":"boolean"},"disabled":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.disabled","typeLabel":"boolean"},"containUserActions":{"type":"array","items":{"type":"string","enum":["disable","reset_mfa","reset_password","revoke_sessions"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containUserActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containUserActions","typeLabel":"enum\u003cstring>[]"},"containEndpointActions":{"type":"array","items":{"type":"string","enum":["isolate","lock"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containEndpointActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containEndpointActions","typeLabel":"enum\u003cstring>[]"},"containFileActions":{"type":"array","items":{"type":"string","enum":["delete","quarantine"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containFileActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containFileActions","typeLabel":"enum\u003cstring>[]"},"containMailboxRuleActions":{"type":"array","items":{"type":"string","enum":["delete"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containMailboxRuleActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.containMailboxRuleActions","typeLabel":"enum\u003cstring>[]"},"uncontainUserActions":{"type":"array","items":{"type":"string","enum":["enable"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.uncontainUserActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.uncontainUserActions","typeLabel":"enum\u003cstring>[]"},"uncontainEndpointActions":{"type":"array","items":{"type":"string","enum":["unisolate","unlock"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.uncontainEndpointActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.uncontainEndpointActions","typeLabel":"enum\u003cstring>[]"},"uncontainFileActions":{"type":"array","items":{"type":"string","enum":["unquarantine"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.uncontainFileActions.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.uncontainFileActions","typeLabel":"enum\u003cstring>[]"},"chatOpsMFA":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.chatOpsMFA","typeLabel":"boolean"},"monitor":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.monitor","typeLabel":"boolean"},"monitorFallbackPreset":{"type":"string","enum":["ESCALATE","ESCALATE_CONTAIN","CLOSE"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.monitorFallbackPreset","typeLabel":"enum\u003cstring>"},"vipChatOps":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.vipChatOps","typeLabel":"boolean"},"createdAt":{"type":"string","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.createdAt","typeLabel":"string"},"updatedAt":{"type":"string","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.updatedAt","typeLabel":"string"},"teamId":{"type":"string","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.teamId","typeLabel":"string"},"chatOpsTimeoutVerdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.chatOpsTimeoutVerdict","typeLabel":"enum\u003cstring>"},"chatOpsTimeoutMonitor":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.chatOpsTimeoutMonitor","typeLabel":"boolean"},"chatOpsTimeoutClose":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.chatOpsTimeoutClose","typeLabel":"boolean"},"chatOpsUnsureVerdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.chatOpsUnsureVerdict","typeLabel":"enum\u003cstring>"},"verdict":{"type":"string","enum":["MALICIOUS","SUSPICIOUS","BENIGN"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.verdict","typeLabel":"enum\u003cstring>"},"description":{"type":"string","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.description","typeLabel":"string"},"managedByParent":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.managedByParent","typeLabel":"boolean"},"severity":{"type":"string","enum":["INFORMATIONAL","LOW","MEDIUM","HIGH","CRITICAL"],"x-extensible-enum":true,"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.severity","typeLabel":"enum\u003cstring>"},"useSourceSeverity":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.useSourceSeverity","typeLabel":"boolean"},"ignoresRemediation":{"type":"boolean","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.ignoresRemediation","typeLabel":"boolean"},"defaults":{"oneOf":[{},{"type":"null","uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.defaults.oneOf.1","typeLabel":"null"}],"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0.defaults","typeLabel":"null"}},"uniqueKey":"rules.items.[INDEX].defaults.oneOf.0","typeLabel":"object"},{"type":"null","uniqueKey":"rules.items.[INDEX].defaults.oneOf.1","typeLabel":"null"}],"uniqueKey":"rules.items.[INDEX].defaults","typeLabel":"object | null"}},"required":["stage","default","managedByWspd","category","wspdRule","retired","escalate","chatOps","close","disabled","containUserActions","containEndpointActions","containFileActions","containMailboxRuleActions","uncontainUserActions","uncontainEndpointActions","uncontainFileActions","chatOpsMFA","monitor","vipChatOps","chatOpsUnsureVerdict","description","severity"],"uniqueKey":"rules.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"rules","typeLabel":"object[]"}},"required":["rules"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"rules":[{"stage":"TRIAGE","default":true,"managedByWspd":true,"category":"OTHER__DIAGNOSTIC","wspdRule":"\u003cstring>","retired":true,"escalate":true,"chatOps":true,"close":true,"disabled":true,"containUserActions":["disable"],"containEndpointActions":["isolate"],"containFileActions":["delete"],"containMailboxRuleActions":["delete"],"uncontainUserActions":["enable"],"uncontainEndpointActions":["unisolate"],"uncontainFileActions":["unquarantine"],"chatOpsMFA":true,"monitor":true,"vipChatOps":true,"chatOpsUnsureVerdict":"MALICIOUS","description":"\u003cstring>","severity":"INFORMATIONAL","id":"\u003cstring>","monitorFallbackPreset":"ESCALATE","createdAt":"\u003cstring>","updatedAt":"\u003cstring>","teamId":"\u003cstring>","chatOpsTimeoutVerdict":"MALICIOUS","chatOpsTimeoutMonitor":true,"chatOpsTimeoutClose":true,"verdict":"MALICIOUS","managedByParent":true,"useSourceSeverity":true,"ignoresRemediation":true,"defaults":{"id":"\u003cstring>","stage":"TRIAGE","default":true,"managedByWspd":true,"category":"OTHER__DIAGNOSTIC","wspdRule":"\u003cstring>","retired":true,"escalate":true,"chatOps":true,"close":true,"disabled":true,"containUserActions":["disable"],"containEndpointActions":["isolate"],"containFileActions":["delete"],"containMailboxRuleActions":["delete"],"uncontainUserActions":["enable"],"uncontainEndpointActions":["unisolate"],"uncontainFileActions":["unquarantine"],"chatOpsMFA":true,"monitor":true,"monitorFallbackPreset":"ESCALATE","vipChatOps":true,"createdAt":"\u003cstring>","updatedAt":"\u003cstring>","teamId":"\u003cstring>","chatOpsTimeoutVerdict":"MALICIOUS","chatOpsTimeoutMonitor":true,"chatOpsTimeoutClose":true,"chatOpsUnsureVerdict":"MALICIOUS","verdict":"MALICIOUS","description":"\u003cstring>","managedByParent":true,"severity":"INFORMATIONAL","useSourceSeverity":true,"ignoresRemediation":true,"defaults":"\u003cunknown>"}}]}}},"exampleType":"generated"}},"exampleType":"generated"},"8f1ccffd-d3e8-4690-b1cf-6c86367268ab":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"statusCode":{"type":"number","isRequired":true,"uniqueKey":"statusCode","typeLabel":"number"},"code":{"type":"string","description":"Stable machine-readable error code. Clients should branch and translate on this instead of `message`.","uniqueKey":"code","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the message for `code`.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"params.additionalProperties","typeLabel":"string | number | boolean | null"},"uniqueKey":"params","typeLabel":"object"},"validationErrors":{"description":"Per-property failures when `code` is `VALIDATION_FAILED` from request validation.","type":"array","items":{"type":"object","properties":{"property":{"type":"string","description":"Dotted path of the invalid property.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].property","typeLabel":"string"},"constraint":{"type":"string","description":"class-validator constraint name; clients translate `errors:validation.\u003cconstraint>`.","isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].constraint","typeLabel":"string"},"params":{"type":"object","description":"Values interpolated into the constraint message.","additionalProperties":{"oneOf":[{"type":"string","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"number","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.1","typeLabel":"number"},{"type":"boolean","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.2","typeLabel":"boolean"},{"type":"null","uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties.oneOf.3","typeLabel":"null"}],"uniqueKey":"validationErrors.items.[INDEX].params.additionalProperties","typeLabel":"string | number | boolean | null"},"isRequired":true,"uniqueKey":"validationErrors.items.[INDEX].params","typeLabel":"object"},"code":{"type":"string","description":"Catalog code overriding the constraint translation.","uniqueKey":"validationErrors.items.[INDEX].code","typeLabel":"string"}},"required":["property","constraint","params"],"uniqueKey":"validationErrors.items.[INDEX]","typeLabel":"object"},"uniqueKey":"validationErrors","typeLabel":"object[]"}},"required":["message","statusCode"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"message":"\u003cstring>","statusCode":123,"code":"\u003cstring>","params":{},"validationErrors":[{"property":"\u003cstring>","constraint":"\u003cstring>","params":{},"code":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"51b1026e-7763-47f6-9768-6dacd2df2fe2":{"bearer":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"}}},"servers":{"ab86667f-e333-4da2-8891-2f502037c913":{"url":"https://api.wirespeed.co"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"scheme":"bearer","bearerFormat":"API key","type":"http","description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","scopes":[],"schemeName":"bearer"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Team API key sent as a Bearer token. Create a key in Wirespeed under Settings → Team. See https://docs.wirespeed.co/api-reference/authentication.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"bearer","name":"Authorization"}],"title":"bearer"}]},"originalFileLocation":"https://api.wirespeed.co/v1/openapi.json"},"subdomain":"wirespeed","siteName":"Wirespeed","title":"Get all verdict rules - Wirespeed","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{"en":{"href":"/api-reference/verdict/get-all-verdict-rules","matchLevel":0},"fr":{"href":"/api-reference/verdict/get-all-verdict-rules","matchLevel":0},"de":{"href":"/api-reference/verdict/get-all-verdict-rules","matchLevel":0}}},"lastModified":"2026-10-22T19:16:19.983Z","originalFileLocation":"api-reference/verdict/get-all-verdict-rules.mdx","locale":"en"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"application-name\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003cmeta data-mint-head name=\"robots\" content=\"noindex\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Get all verdict rules - Wirespeed\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Wirespeed\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://wirespeed.mintlify.app/_mintlify/api/og/v2?division=Verdict\u0026amp;title=Get+all+verdict+rules\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=c2f3a2be564d8a28ecd856bef12c7635e1f5fbb782cc11bca1c9995bb03151b8\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Get all verdict rules - Wirespeed\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://wirespeed.mintlify.app/_mintlify/api/og/v2?division=Verdict\u0026amp;title=Get+all+verdict+rules\u0026amp;theme=a3968f97c94697c94d99cd47\u0026amp;signature=c2f3a2be564d8a28ecd856bef12c7635e1f5fbb782cc11bca1c9995bb03151b8\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/wirespeed/zFZyQuBb0QoWhRR0/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Wirespeed\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#8B5CF6\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/verdict/get-all-verdict-rules.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.wirespeed.co/#organization\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/wirespeed/ITbNYwB83FOJ431D/logo/logo-wspd-by-coalition-light.png?fit=max\u0026auto=format\u0026n=ITbNYwB83FOJ431D\u0026q=85\u0026s=e238190056aa09d41d50b6dc3a64b06c\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.wirespeed.co#website\",\"name\":\"Wirespeed\",\"url\":\"https://docs.wirespeed.co\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules#webpage\",\"url\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules\",\"name\":\"Get all verdict rules\",\"dateModified\":\"2026-10-22T19:16:19.983Z\",\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"},\"breadcrumb\":{\"@id\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Endpoints\",\"item\":\"https://docs.wirespeed.co/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Get all verdict rules\",\"item\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules#apireference\",\"headline\":\"Get all verdict rules\",\"name\":\"Get all verdict rules\",\"url\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules\",\"mainEntityOfPage\":{\"@id\":\"https://docs.wirespeed.co/api-reference/verdict/get-all-verdict-rules#webpage\"},\"dateModified\":\"2026-10-22T19:16:19.983Z\",\"publisher\":{\"@id\":\"https://docs.wirespeed.co/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.wirespeed.co#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Wirespeed\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Wirespeed","nav":{"global":null,"languages":[{"language":"en","default":true,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/introduction"}]},{"anchor":"API Reference","icon":"code","groups":[{"group":"Getting Started","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Endpoints","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add other integration type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"}]},{"group":"Users","pages":[{"title":"Get current user information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams with slim payload","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint by ID","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Changelog","icon":"history","pages":[{"title":"Changelog","href":"/changelog"}]}]},{"language":"fr","navbar":{"primary":{"type":"button","label":"Retour à Wirespeed","href":"https://app.wirespeed.co"}},"hidden":true,"anchors":[{"anchor":"Documentation","icon":"book-open","pages":[{"title":"Documentation","href":"/fr/introduction"}]},{"anchor":"Référence de l’API","icon":"code","groups":[{"group":"Prise en main","pages":[{"title":"Authentication","description":"Create a team API key and authenticate Wirespeed API requests","href":"/api-reference/authentication"}]},{"group":"Points de terminaison","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","description":"SP teams fan out each email to SELF + CLIENTS rows. When subjectLine or richNotifications are provided they are written to every affected row.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","description":"Returns total count of cases matching the same filters as the search endpoint.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","description":"Averages time-to-detect, time-to-verdict, time-to-remediate, and time-to-close across all cases matching the same filters as the search endpoint. Pagination and sort fields are ignored.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","description":"Returns counts by health status (healthy, unhealthy, unstable, unknown) for the attention banner and dashboards","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","description":"Returns total count of integrations matching the same filters as the search endpoint.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add other integration type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","description":"Accepts remediation for each selected asset and returns the accepted operation ids to poll until provider remediation completes.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","description":"Accepts release for each selected asset and returns the accepted operation ids to poll until provider remediation completes.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","description":"Resolves the identity behind the bearer token, including the role it grants. API keys authenticate as their service account user, so this is how a caller discovers the effective role of a key.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"}]},{"group":"Users","pages":[{"title":"Get current user information","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","description":"Teams with child teams (rows with parent_team_id pointing at this team) cannot be deleted. Empty service providers with no child teams may be deleted.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams with slim payload","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","description":"Returns distinct provider license IDs across the current team integrations.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","description":"Returns total count of directory users matching the same filters as the search endpoint. Use this for pagination totalCount without running the count in the search query.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","description":"Returns one page of users. For total row count for these filters, call POST /directory/count with the same body.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint by ID","description":"Retrieves detailed information about a specific endpoint including its public IPs and integration data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","description":"Search and filter endpoints with pagination support. Can filter by Critical Asset status, IP, user, and managed status","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","description":"Returns total count of endpoints matching the same filters as the search endpoint. Use this to get totalCount for pagination without running the count in the search query.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","description":"Returns the current count of Critical Assets and the change over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Journal des modifications","icon":"history","pages":[{"title":"Journal des modifications","href":"/changelog"}]}]},{"language":"de","navbar":{"primary":{"type":"button","label":"Zurück zu Wirespeed","href":"https://app.wirespeed.co"}},"hidden":true,"anchors":[{"anchor":"Dokumentation","icon":"book-open","pages":[{"title":"Dokumentation","href":"/de/introduction"}]},{"anchor":"API-Referenz","icon":"code","groups":[{"group":"Erste Schritte","pages":[{"title":"Authentication","description":"Create a team API key and authenticate Wirespeed API requests","href":"/api-reference/authentication"}]},{"group":"Endpunkte","pages":[{"group":"Notification","pages":[{"title":"Bulk replace the current team's shared-inbox email subscriptions and settings for a notification type","description":"SP teams fan out each email to SELF + CLIENTS rows. When subjectLine or richNotifications are provided they are written to every affected row.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/notification/subscription/team-channel","href":"/api-reference/notification/bulk-replace-the-current-teams-shared-inbox-email-subscriptions-and-settings-for-a-notification-type"}]},{"group":"Cases","pages":[{"title":"Get case statistics by severity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/severity","href":"/api-reference/cases/get-case-statistics-by-severity"},{"title":"Get case statistics by category class","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/stats/category-class","href":"/api-reference/cases/get-case-statistics-by-category-class"},{"title":"Get weekly case counts","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/count/weekly","href":"/api-reference/cases/get-weekly-case-counts"},{"title":"Get case counts grouped by team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count/by-team","href":"/api-reference/cases/get-case-counts-grouped-by-team"},{"title":"Get all detections for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections","href":"/api-reference/cases/get-all-detections-for-a-case"},{"title":"Get all detections for a case without entities","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/detections/list","href":"/api-reference/cases/get-all-detections-for-a-case-without-entities"},{"title":"Get TTD/TTV/TTR/TTC metrics for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/metrics","href":"/api-reference/cases/get-ttdttvttrttc-metrics-for-a-case"},{"title":"Update case details","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/cases/{id}","href":"/api-reference/cases/update-case-details"},{"title":"Get related cases","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/related","href":"/api-reference/cases/get-related-cases"},{"title":"Get threat indicators for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{id}/threat-indicators","href":"/api-reference/cases/get-threat-indicators-for-a-case"},{"title":"Search and list cases","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases","href":"/api-reference/cases/search-and-list-cases"},{"title":"Get cases search count","description":"Returns total count of cases matching the same filters as the search endpoint.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/count","href":"/api-reference/cases/get-cases-search-count"},{"title":"Get MTTD/MTTV/MTTR/MTTC for cases matching search filters","description":"Averages time-to-detect, time-to-verdict, time-to-remediate, and time-to-close across all cases matching the same filters as the search endpoint. Pagination and sort fields are ignored.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/cases/metrics","href":"/api-reference/cases/get-mttdmttvmttrmttc-for-cases-matching-search-filters"},{"title":"Get case by ID or SID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/cases/{idOrSid}","href":"/api-reference/cases/get-case-by-id-or-sid"}]},{"group":"Timeline","pages":[{"title":"Merged timeline of comments, logs, and activity for an entity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline","href":"/api-reference/timeline/merged-timeline-of-comments-logs-and-activity-for-an-entity"},{"title":"List comments for an entity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/timeline/comments","href":"/api-reference/timeline/list-comments-for-an-entity"},{"title":"Create a comment with optional image attachments","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/timeline/comments","href":"/api-reference/timeline/create-a-comment-with-optional-image-attachments"},{"title":"Soft-delete a comment","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/timeline/comments/{id}","href":"/api-reference/timeline/soft-delete-a-comment"},{"title":"Edit comment text and optionally replace attachments","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/timeline/comments/{id}","href":"/api-reference/timeline/edit-comment-text-and-optionally-replace-attachments"}]},{"group":"Integration","pages":[{"title":"Get integration health summary","description":"Returns counts by health status (healthy, unhealthy, unstable, unknown) for the attention banner and dashboards","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/health/summary","href":"/api-reference/integration/get-integration-health-summary"},{"title":"Search integrations","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration","href":"/api-reference/integration/search-integrations"},{"title":"Get integration search count","description":"Returns total count of integrations matching the same filters as the search endpoint.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/count","href":"/api-reference/integration/get-integration-search-count"},{"title":"Add other integration type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/integration/other","href":"/api-reference/integration/add-other-integration-type"},{"title":"Get OAuth installation URL","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/oauth/url","href":"/api-reference/integration/get-oauth-installation-url"},{"title":"Get all integration configurations","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config","href":"/api-reference/integration/get-all-integration-configurations"},{"title":"Get integration by ID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}","href":"/api-reference/integration/get-integration-by-id"},{"title":"Delete integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/integration/{id}","href":"/api-reference/integration/delete-integration"},{"title":"Update integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}","href":"/api-reference/integration/update-integration"},{"title":"Get integration configuration by type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/config/{type}","href":"/api-reference/integration/get-integration-configuration-by-type"},{"title":"Get synced licenses for integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/integration/{id}/licenses","href":"/api-reference/integration/get-synced-licenses-for-integration"},{"title":"Set whether assigned directory users count toward billable users","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/integration/{id}/licenses/{licenseId}","href":"/api-reference/integration/set-whether-assigned-directory-users-count-toward-billable-users"},{"title":"Check integration entitlements","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/integration/{id}/entitlements","href":"/api-reference/integration/check-integration-entitlements"}]},{"group":"OCSF","pages":[{"title":"Search OCSF events","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/ocsf/advanced","href":"/api-reference/ocsf/search-ocsf-events"}]},{"group":"Verdict","pages":[{"title":"Get all verdict rules","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /verdict/rules","href":"/api-reference/verdict/get-all-verdict-rules"}]},{"group":"Asset","pages":[{"title":"Get all assets for a case","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/case/{id}","href":"/api-reference/asset/get-all-assets-for-a-case"},{"title":"Get asset counts by type","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/counts","href":"/api-reference/asset/get-asset-counts-by-type"},{"title":"Bulk contain multiple assets","description":"Accepts remediation for each selected asset and returns the accepted operation ids to poll until provider remediation completes.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/contain","href":"/api-reference/asset/bulk-contain-multiple-assets"},{"title":"Bulk uncontain multiple assets","description":"Accepts release for each selected asset and returns the accepted operation ids to poll until provider remediation completes.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/bulk/uncontain","href":"/api-reference/asset/bulk-uncontain-multiple-assets"},{"title":"Contain directory user","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/contain","href":"/api-reference/asset/contain-directory-user"},{"title":"Contain endpoint","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/contain","href":"/api-reference/asset/contain-endpoint"},{"title":"Uncontain endpoint","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/endpoint/{id}/uncontain","href":"/api-reference/asset/uncontain-endpoint"},{"title":"Uncontain directory","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/directory/{id}/uncontain","href":"/api-reference/asset/uncontain-directory"},{"title":"Contain file","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/contain","href":"/api-reference/asset/contain-file"},{"title":"Uncontain file","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/asset/file/{id}/uncontain","href":"/api-reference/asset/uncontain-file"},{"title":"Get active containment actions for an asset","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-status/{assetType}/{id}","href":"/api-reference/asset/get-active-containment-actions-for-an-asset"},{"title":"Get containment action history for an asset","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/asset/containment-history/{assetType}/{id}","href":"/api-reference/asset/get-containment-action-history-for-an-asset"}]},{"group":"Authentication","pages":[{"title":"Get current authenticated user information","description":"Resolves the identity behind the bearer token, including the role it grants. API keys authenticate as their service account user, so this is how a caller discovers the effective role of a key.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/auth/me","href":"/api-reference/authentication/get-current-authenticated-user-information"}]},{"group":"Users","pages":[{"title":"Get current user information","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/users","href":"/api-reference/users/get-current-user-information"},{"title":"Update user role","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/users/{id}/role","href":"/api-reference/users/update-user-role"}]},{"group":"Team","pages":[{"title":"Get team detection statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections","href":"/api-reference/team/get-team-detection-statistics"},{"title":"Get team billable resource statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/resources","href":"/api-reference/team/get-team-billable-resource-statistics"},{"title":"Get team event statistics by integration","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/events","href":"/api-reference/team/get-team-event-statistics-by-integration"},{"title":"Detections created over time","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/detections-over-time","href":"/api-reference/team/detections-created-over-time"},{"title":"Cases over time","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/cases-over-time","href":"/api-reference/team/cases-over-time"},{"title":"Noise reduction rate over time","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/statistics/noise-reduction-over-time","href":"/api-reference/team/noise-reduction-rate-over-time"},{"title":"Switch to a different team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/switch","href":"/api-reference/team/switch-to-a-different-team"},{"title":"Get current team information","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team","href":"/api-reference/team/get-current-team-information"},{"title":"Create a new team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team","href":"/api-reference/team/create-a-new-team"},{"title":"Search service provider teams","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team","href":"/api-reference/team/search-service-provider-teams"},{"title":"Delete the current team and all associated data","description":"Teams with child teams (rows with parent_team_id pointing at this team) cannot be deleted. Empty service providers with no child teams may be deleted.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team","href":"/api-reference/team/delete-the-current-team-and-all-associated-data"},{"title":"Update team information","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/team","href":"/api-reference/team/update-team-information"},{"title":"Get all teams with slim payload","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/all-slim","href":"/api-reference/team/get-all-teams-with-slim-payload"},{"title":"Search team members","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users","href":"/api-reference/team/search-team-members"},{"title":"Get team member search count","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/users/count","href":"/api-reference/team/get-team-member-search-count"},{"title":"Search system logs","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/team/log","href":"/api-reference/team/search-system-logs"},{"title":"Create a notification webhook for a client team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/client/{teamId}/notification-webhook","href":"/api-reference/team/create-a-notification-webhook-for-a-client-team"},{"title":"Invite user to team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/invite","href":"/api-reference/team/invite-user-to-team"},{"title":"Remove external user from team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/users/{userId}","href":"/api-reference/team/remove-external-user-from-team"},{"title":"Get all team-level API keys","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/team/api-keys","href":"/api-reference/team/get-all-team-level-api-keys"},{"title":"Create a team-level API key","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/team/api-keys","href":"/api-reference/team/create-a-team-level-api-key"},{"title":"Delete a team-level API key","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/team/api-keys/{apiKeyId}","href":"/api-reference/team/delete-a-team-level-api-key"}]},{"group":"Directory","pages":[{"title":"Get directory user statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/stats","href":"/api-reference/directory/get-directory-user-statistics"},{"title":"List logical directory user licenses","description":"Returns distinct provider license IDs across the current team integrations.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/licenses","href":"/api-reference/directory/list-logical-directory-user-licenses"},{"title":"Get directory user by ID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/{id}","href":"/api-reference/directory/get-directory-user-by-id"},{"title":"Update directory user","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/directory/{id}","href":"/api-reference/directory/update-directory-user"},{"title":"Get directory user search count","description":"Returns total count of directory users matching the same filters as the search endpoint. Use this for pagination totalCount without running the count in the search query.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory/count","href":"/api-reference/directory/get-directory-user-search-count"},{"title":"Search directory users","description":"Returns one page of users. For total row count for these filters, call POST /directory/count with the same body.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/directory","href":"/api-reference/directory/search-directory-users"},{"title":"Get VIP user count and change","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/directory/vip/count","href":"/api-reference/directory/get-vip-user-count-and-change"}]},{"group":"Detection","pages":[{"title":"Get detection statistics by severity","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/severity","href":"/api-reference/detection/get-detection-statistics-by-severity"},{"title":"Get detection statistics by category class","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/category-class","href":"/api-reference/detection/get-detection-statistics-by-category-class"},{"title":"Get noise reduction summary statistics","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/stats/noise-reduction-summary","href":"/api-reference/detection/get-noise-reduction-summary-statistics"},{"title":"Calculate mean time to detect","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-detect","href":"/api-reference/detection/calculate-mean-time-to-detect"},{"title":"Calculate mean time to verdict","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-verdict","href":"/api-reference/detection/calculate-mean-time-to-verdict"},{"title":"Calculate mean time to remediate for the team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-remediate","href":"/api-reference/detection/calculate-mean-time-to-remediate-for-the-team"},{"title":"Calculate mean time to close for the team","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/mean-time-to-close","href":"/api-reference/detection/calculate-mean-time-to-close-for-the-team"},{"title":"Search and list detections","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection","href":"/api-reference/detection/search-and-list-detections"},{"title":"Count detections matching search filters","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/count","href":"/api-reference/detection/count-detections-matching-search-filters"},{"title":"Average MTTD and MTTV across detections matching search filters","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/detection/metrics","href":"/api-reference/detection/average-mttd-and-mttv-across-detections-matching-search-filters"},{"title":"Get time-to-detect and time-to-verdict metrics for a single detection","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/metrics","href":"/api-reference/detection/get-time-to-detect-and-time-to-verdict-metrics-for-a-single-detection"},{"title":"Compare an identity detection's login against user and team authentication baselines","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{id}/identity-baseline","href":"/api-reference/detection/compare-an-identity-detections-login-against-user-and-team-authentication-baselines"},{"title":"Get detection by ID or SID","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/detection/{idOrSid}","href":"/api-reference/detection/get-detection-by-id-or-sid"},{"title":"Update detection details","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/detection/{idOrSid}","href":"/api-reference/detection/update-detection-details"}]},{"group":"Endpoint","pages":[{"title":"Get endpoint by ID","description":"Retrieves detailed information about a specific endpoint including its public IPs and integration data","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/{id}","href":"/api-reference/endpoint/get-endpoint-by-id"},{"title":"Search endpoints","description":"Search and filter endpoints with pagination support. Can filter by Critical Asset status, IP, user, and managed status","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint","href":"/api-reference/endpoint/search-endpoints"},{"title":"Get endpoint search count","description":"Returns total count of endpoints matching the same filters as the search endpoint. Use this to get totalCount for pagination without running the count in the search query.","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/endpoint/count","href":"/api-reference/endpoint/get-endpoint-search-count"},{"title":"Get Critical Asset count and change","description":"Returns the current count of Critical Assets and the change over time","deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json get /v1/endpoint/hva/count","href":"/api-reference/endpoint/get-critical-asset-count-and-change"}]},{"group":"Group","pages":[{"title":"Create a custom group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group","href":"/api-reference/group/create-a-custom-group"},{"title":"Search groups","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json post /v1/group","href":"/api-reference/group/search-groups"},{"title":"Update a group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json patch /v1/group/{id}","href":"/api-reference/group/update-a-group"},{"title":"Add a directory user to a group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json put /v1/group/{id}/user/{userId}","href":"/api-reference/group/add-a-directory-user-to-a-group"},{"title":"Remove a directory user from a group","description":null,"deprecated":null,"version":null,"openapi":"https://api.wirespeed.co/v1/openapi.json delete /v1/group/{id}/user/{userId}","href":"/api-reference/group/remove-a-directory-user-from-a-group"}]}]}]},{"anchor":"Änderungsprotokoll","icon":"history","pages":[{"title":"Änderungsprotokoll","href":"/changelog"}]}]}]},"title":"Get all verdict rules - Wirespeed","buildId":"dpl_HcHmUS6i3UwswnTHJUEdcTtwfdTQ","deploymentId":"dpl_HcHmUS6i3UwswnTHJUEdcTtwfdTQ","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-BRm_l__d.js","utils-f1l1Oc-G.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-BlhqDhJO.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-DHCB7rsC.js","snippetPresets-CYXLx6Hv.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-B78P2dEq.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-C4YLPVAh.js","shallow-vlLnTDkQ.js","getApiPlaygroundDisplay-D_98hhvf.js","CodeSnippet-DtnZHGqq.js","CodeSnippets-CLFb8KJt.js","Page-kQh739Uz.js","getPastedJson-Cq-zlbnU.js","icon-sN3t983t.js","MethodPill-P_YQ2s09.js","DuplicateIcon-BVzyNsGJ.js","createIcon-B3jqgqC6.js","DynamicMarkdown-Crwq6WG_.js","SectionHeading-C7pGS2Bb.js","axios-vUo_bRtp.js","Markdown-BuPH8yuW.js","clsx-CCOYKgaU.js","lib--scc4DXi.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-BnkC_6oA.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BM4S31-f.js"]}