# Wirespeed

## Docs

- [Bulk contain multiple assets](https://docs.wirespeed.co/api-reference/asset/bulk-contain-multiple-assets.md)
- [Bulk uncontain multiple assets](https://docs.wirespeed.co/api-reference/asset/bulk-uncontain-multiple-assets.md)
- [Contain directory user](https://docs.wirespeed.co/api-reference/asset/contain-directory-user.md)
- [Contain endpoint](https://docs.wirespeed.co/api-reference/asset/contain-endpoint.md)
- [Contain file](https://docs.wirespeed.co/api-reference/asset/contain-file.md)
- [Get active containment actions for an asset](https://docs.wirespeed.co/api-reference/asset/get-active-containment-actions-for-an-asset.md)
- [Get all assets for a case](https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-case.md)
- [Get all assets for a detection](https://docs.wirespeed.co/api-reference/asset/get-all-assets-for-a-detection.md)
- [Get asset counts by type](https://docs.wirespeed.co/api-reference/asset/get-asset-counts-by-type.md)
- [Get containment action history for an asset](https://docs.wirespeed.co/api-reference/asset/get-containment-action-history-for-an-asset.md)
- [Uncontain directory](https://docs.wirespeed.co/api-reference/asset/uncontain-directory.md)
- [Uncontain endpoint](https://docs.wirespeed.co/api-reference/asset/uncontain-endpoint.md)
- [Uncontain file](https://docs.wirespeed.co/api-reference/asset/uncontain-file.md)
- [Bulk close cases](https://docs.wirespeed.co/api-reference/cases/bulk-close-cases.md)
- [Calculate mean time to contain](https://docs.wirespeed.co/api-reference/cases/calculate-mean-time-to-contain.md)
- [Calculate mean time to resolution](https://docs.wirespeed.co/api-reference/cases/calculate-mean-time-to-resolution.md)
- [Delete a case](https://docs.wirespeed.co/api-reference/cases/delete-a-case.md)
- [Export cases to CSV](https://docs.wirespeed.co/api-reference/cases/export-cases-to-csv.md)
- [Get active bulk jobs for current user](https://docs.wirespeed.co/api-reference/cases/get-active-bulk-jobs-for-current-user.md)
- [Get all detections for a case](https://docs.wirespeed.co/api-reference/cases/get-all-detections-for-a-case.md)
- [Get all detections for a case without entities](https://docs.wirespeed.co/api-reference/cases/get-all-detections-for-a-case-without-entities.md)
- [Get bulk job status](https://docs.wirespeed.co/api-reference/cases/get-bulk-job-status.md)
- [Get case by ID or SID](https://docs.wirespeed.co/api-reference/cases/get-case-by-id-or-sid.md)
- [Get case counts grouped by team](https://docs.wirespeed.co/api-reference/cases/get-case-counts-grouped-by-team.md)
- [Get case statistics by category class](https://docs.wirespeed.co/api-reference/cases/get-case-statistics-by-category-class.md)
- [Get case statistics by severity](https://docs.wirespeed.co/api-reference/cases/get-case-statistics-by-severity.md)
- [Get cases search count](https://docs.wirespeed.co/api-reference/cases/get-cases-search-count.md): Returns total count of cases matching the same filters as the search endpoint.
- [Get example case for demonstration](https://docs.wirespeed.co/api-reference/cases/get-example-case-for-demonstration.md)
- [Get related cases](https://docs.wirespeed.co/api-reference/cases/get-related-cases.md)
- [Get threat indicators for a case](https://docs.wirespeed.co/api-reference/cases/get-threat-indicators-for-a-case.md)
- [Get weekly case counts](https://docs.wirespeed.co/api-reference/cases/get-weekly-case-counts.md)
- [Reingest all detections for a case](https://docs.wirespeed.co/api-reference/cases/reingest-all-detections-for-a-case.md)
- [Search and list cases](https://docs.wirespeed.co/api-reference/cases/search-and-list-cases.md)
- [Submit feedback for AI case summary](https://docs.wirespeed.co/api-reference/cases/submit-feedback-for-ai-case-summary.md)
- [Update case details](https://docs.wirespeed.co/api-reference/cases/update-case-details.md)
- [Calculate mean time to detect](https://docs.wirespeed.co/api-reference/detection/calculate-mean-time-to-detect.md)
- [Calculate mean time to verdict](https://docs.wirespeed.co/api-reference/detection/calculate-mean-time-to-verdict.md)
- [Count detections matching search filters](https://docs.wirespeed.co/api-reference/detection/count-detections-matching-search-filters.md)
- [Create a custom detection](https://docs.wirespeed.co/api-reference/detection/create-a-custom-detection.md)
- [Delete a custom detection](https://docs.wirespeed.co/api-reference/detection/delete-a-custom-detection.md)
- [Delete a detection](https://docs.wirespeed.co/api-reference/detection/delete-a-detection.md)
- [Export detections to CSV](https://docs.wirespeed.co/api-reference/detection/export-detections-to-csv.md)
- [Get AQL questions for detection](https://docs.wirespeed.co/api-reference/detection/get-aql-questions-for-detection.md)
- [Get detection by ID or SID](https://docs.wirespeed.co/api-reference/detection/get-detection-by-id-or-sid.md)
- [Get detection chat ops statistics](https://docs.wirespeed.co/api-reference/detection/get-detection-chat-ops-statistics.md)
- [Get detection statistics by category class](https://docs.wirespeed.co/api-reference/detection/get-detection-statistics-by-category-class.md)
- [Get detection statistics by severity](https://docs.wirespeed.co/api-reference/detection/get-detection-statistics-by-severity.md)
- [Get example detection for demonstration](https://docs.wirespeed.co/api-reference/detection/get-example-detection-for-demonstration.md)
- [Get noise reduction statistics over time](https://docs.wirespeed.co/api-reference/detection/get-noise-reduction-statistics-over-time.md)
- [List custom detections](https://docs.wirespeed.co/api-reference/detection/list-custom-detections.md)
- [Reingest a detection](https://docs.wirespeed.co/api-reference/detection/reingest-a-detection.md)
- [Search and list detections](https://docs.wirespeed.co/api-reference/detection/search-and-list-detections.md)
- [Update a custom detection](https://docs.wirespeed.co/api-reference/detection/update-a-custom-detection.md)
- [Update detection details](https://docs.wirespeed.co/api-reference/detection/update-detection-details.md)
- [Add group to directory user](https://docs.wirespeed.co/api-reference/directory/add-group-to-directory-user.md)
- [Add users to chat ops onboarding](https://docs.wirespeed.co/api-reference/directory/add-users-to-chat-ops-onboarding.md)
- [Add users to chat ops onboarding](https://docs.wirespeed.co/api-reference/directory/add-users-to-chat-ops-onboarding-1.md)
- [Get directory user by ID](https://docs.wirespeed.co/api-reference/directory/get-directory-user-by-id.md)
- [Get directory user search count](https://docs.wirespeed.co/api-reference/directory/get-directory-user-search-count.md): Returns total count of directory users matching the same filters as the search endpoint. Use this for pagination totalCount without running the count in the search query.
- [Get directory user statistics](https://docs.wirespeed.co/api-reference/directory/get-directory-user-statistics.md)
- [Get VIP user count and change](https://docs.wirespeed.co/api-reference/directory/get-vip-user-count-and-change.md)
- [Refresh directory user data](https://docs.wirespeed.co/api-reference/directory/refresh-directory-user-data.md)
- [Remove group from directory user](https://docs.wirespeed.co/api-reference/directory/remove-group-from-directory-user.md)
- [Remove user from chat ops onboarding](https://docs.wirespeed.co/api-reference/directory/remove-user-from-chat-ops-onboarding.md)
- [Remove users from chat ops onboarding](https://docs.wirespeed.co/api-reference/directory/remove-users-from-chat-ops-onboarding.md)
- [Reset SMS invite attempts and resend invite](https://docs.wirespeed.co/api-reference/directory/reset-sms-invite-attempts-and-resend-invite.md)
- [Search directory users](https://docs.wirespeed.co/api-reference/directory/search-directory-users.md): Returns one page of users. For total row count for these filters, call POST /directory/count with the same body.
- [Update directory user](https://docs.wirespeed.co/api-reference/directory/update-directory-user.md)
- [Get Critical Asset count and change](https://docs.wirespeed.co/api-reference/endpoint/get-critical-asset-count-and-change.md): Returns the current count of Critical Assets and the change over time
- [Get endpoint by ID](https://docs.wirespeed.co/api-reference/endpoint/get-endpoint-by-id.md): Retrieves detailed information about a specific endpoint including its public IPs and integration data
- [Get endpoint search count](https://docs.wirespeed.co/api-reference/endpoint/get-endpoint-search-count.md): Returns total count of endpoints matching the same filters as the search endpoint. Use this to get totalCount for pagination without running the count in the search query.
- [Get endpoint statistics](https://docs.wirespeed.co/api-reference/endpoint/get-endpoint-statistics.md): Returns aggregated statistics including total counts, live/contained counts, and OS distribution
- [Refresh endpoint data](https://docs.wirespeed.co/api-reference/endpoint/refresh-endpoint-data.md): Manually trigger a refresh of endpoint data from integrated systems (EDR/MDM)
- [Search endpoints](https://docs.wirespeed.co/api-reference/endpoint/search-endpoints.md): Search and filter endpoints with pagination support. Can filter by Critical Asset status, IP, user, and managed status
- [Update endpoint properties](https://docs.wirespeed.co/api-reference/endpoint/update-endpoint-properties.md): Update endpoint properties such as Critical Asset status. Requires analyst role
- [Add API key integration](https://docs.wirespeed.co/api-reference/integration/add-api-key-integration.md)
- [Add basic authentication integration](https://docs.wirespeed.co/api-reference/integration/add-basic-authentication-integration.md)
- [Add other integration type](https://docs.wirespeed.co/api-reference/integration/add-other-integration-type.md)
- [Check integration entitlements](https://docs.wirespeed.co/api-reference/integration/check-integration-entitlements.md)
- [Delete integration](https://docs.wirespeed.co/api-reference/integration/delete-integration.md)
- [Dismiss an entitlement warning](https://docs.wirespeed.co/api-reference/integration/dismiss-an-entitlement-warning.md)
- [Get additional required fields for Halo ITSM Incident tickets](https://docs.wirespeed.co/api-reference/integration/get-additional-required-fields-for-halo-itsm-incident-tickets.md)
- [Get all integration configurations](https://docs.wirespeed.co/api-reference/integration/get-all-integration-configurations.md)
- [Get AWS remote API key](https://docs.wirespeed.co/api-reference/integration/get-aws-remote-api-key.md)
- [Get board ticket statuses](https://docs.wirespeed.co/api-reference/integration/get-board-ticket-statuses.md)
- [Get board ticket types](https://docs.wirespeed.co/api-reference/integration/get-board-ticket-types.md)
- [Get ConnectWise boards](https://docs.wirespeed.co/api-reference/integration/get-connectwise-boards.md)
- [Get ConnectWise companies](https://docs.wirespeed.co/api-reference/integration/get-connectwise-companies.md)
- [Get ConnectWise priorities](https://docs.wirespeed.co/api-reference/integration/get-connectwise-priorities.md)
- [Get ConnectWise PSA configuration](https://docs.wirespeed.co/api-reference/integration/get-connectwise-psa-configuration.md)
- [Get daily integration log counts from ClickHouse](https://docs.wirespeed.co/api-reference/integration/get-daily-integration-log-counts-from-clickhouse.md)
- [Get Halo ITSM categories (type_id=1)](https://docs.wirespeed.co/api-reference/integration/get-halo-itsm-categories-type_id=1.md)
- [Get Halo ITSM clients](https://docs.wirespeed.co/api-reference/integration/get-halo-itsm-clients.md)
- [Get Halo ITSM configuration](https://docs.wirespeed.co/api-reference/integration/get-halo-itsm-configuration.md)
- [Get Halo ITSM teams](https://docs.wirespeed.co/api-reference/integration/get-halo-itsm-teams.md)
- [Get integration by ID](https://docs.wirespeed.co/api-reference/integration/get-integration-by-id.md)
- [Get integration configuration by type](https://docs.wirespeed.co/api-reference/integration/get-integration-configuration-by-type.md)
- [Get integration health summary](https://docs.wirespeed.co/api-reference/integration/get-integration-health-summary.md): Returns counts by health status (healthy, unhealthy, unstable, unknown) for the attention banner and dashboards
- [Get integration log search count from ClickHouse](https://docs.wirespeed.co/api-reference/integration/get-integration-log-search-count-from-clickhouse.md)
- [Get integration search count](https://docs.wirespeed.co/api-reference/integration/get-integration-search-count.md): Returns total count of integrations matching the same filters as the search endpoint.
- [Get Jira Cloud instances](https://docs.wirespeed.co/api-reference/integration/get-jira-cloud-instances.md)
- [Get Jira configuration](https://docs.wirespeed.co/api-reference/integration/get-jira-configuration.md)
- [Get Jira issue types](https://docs.wirespeed.co/api-reference/integration/get-jira-issue-types.md)
- [Get Jira projects](https://docs.wirespeed.co/api-reference/integration/get-jira-projects.md)
- [Get OAuth installation URL](https://docs.wirespeed.co/api-reference/integration/get-oauth-installation-url.md)
- [Get Odoo Helpdesk configuration](https://docs.wirespeed.co/api-reference/integration/get-odoo-helpdesk-configuration.md)
- [Get synced licenses for integration](https://docs.wirespeed.co/api-reference/integration/get-synced-licenses-for-integration.md)
- [Get webhook secret](https://docs.wirespeed.co/api-reference/integration/get-webhook-secret.md)
- [Handle authenticated OAuth redirect](https://docs.wirespeed.co/api-reference/integration/handle-authenticated-oauth-redirect.md)
- [Handle integration webhook](https://docs.wirespeed.co/api-reference/integration/handle-integration-webhook.md)
- [Handle OAuth redirect](https://docs.wirespeed.co/api-reference/integration/handle-oauth-redirect.md)
- [Invoke integration action](https://docs.wirespeed.co/api-reference/integration/invoke-integration-action.md)
- [List available Odoo Helpdesk databases](https://docs.wirespeed.co/api-reference/integration/list-available-odoo-helpdesk-databases.md)
- [List Odoo Helpdesk companies for a database](https://docs.wirespeed.co/api-reference/integration/list-odoo-helpdesk-companies-for-a-database.md)
- [List Odoo Helpdesk stages and return a suggested Wirespeed→stage mapping](https://docs.wirespeed.co/api-reference/integration/list-odoo-helpdesk-stages-and-return-a-suggested-wirespeed→stage-mapping.md)
- [List Odoo Helpdesk teams for a database](https://docs.wirespeed.co/api-reference/integration/list-odoo-helpdesk-teams-for-a-database.md)
- [Mute hourly quality notifications for integration](https://docs.wirespeed.co/api-reference/integration/mute-hourly-quality-notifications-for-integration.md)
- [Register AWS integration remotely](https://docs.wirespeed.co/api-reference/integration/register-aws-integration-remotely.md)
- [Search integration logs from ClickHouse](https://docs.wirespeed.co/api-reference/integration/search-integration-logs-from-clickhouse.md)
- [Search integrations](https://docs.wirespeed.co/api-reference/integration/search-integrations.md)
- [Trigger health check for all team integrations](https://docs.wirespeed.co/api-reference/integration/trigger-health-check-for-all-team-integrations.md)
- [Trigger health check for integration](https://docs.wirespeed.co/api-reference/integration/trigger-health-check-for-integration.md)
- [Undismiss an entitlement warning](https://docs.wirespeed.co/api-reference/integration/undismiss-an-entitlement-warning.md)
- [Unmute hourly quality notifications for integration](https://docs.wirespeed.co/api-reference/integration/unmute-hourly-quality-notifications-for-integration.md)
- [Update ConnectWise PSA configuration](https://docs.wirespeed.co/api-reference/integration/update-connectwise-psa-configuration.md)
- [Update Halo ITSM configuration](https://docs.wirespeed.co/api-reference/integration/update-halo-itsm-configuration.md)
- [Update integration](https://docs.wirespeed.co/api-reference/integration/update-integration.md)
- [Update Jira configuration](https://docs.wirespeed.co/api-reference/integration/update-jira-configuration.md)
- [Update Odoo Helpdesk configuration](https://docs.wirespeed.co/api-reference/integration/update-odoo-helpdesk-configuration.md)
- [Verify integration webhook](https://docs.wirespeed.co/api-reference/integration/verify-integration-webhook.md)
- [Verify JWT token](https://docs.wirespeed.co/api-reference/integration/verify-jwt-token.md)
- [Add operating team](https://docs.wirespeed.co/api-reference/team/add-operating-team.md)
- [Check if the current user can modify all team members, including SP-managed users](https://docs.wirespeed.co/api-reference/team/check-if-the-current-user-can-modify-all-team-members-including-sp-managed-users.md)
- [Containment actions over time](https://docs.wirespeed.co/api-reference/team/containment-actions-over-time.md)
- [Create a new team](https://docs.wirespeed.co/api-reference/team/create-a-new-team.md)
- [Create a SKU change request](https://docs.wirespeed.co/api-reference/team/create-a-sku-change-request.md)
- [Create a team-level API key](https://docs.wirespeed.co/api-reference/team/create-a-team-level-api-key.md)
- [Delete a team-level API key](https://docs.wirespeed.co/api-reference/team/delete-a-team-level-api-key.md)
- [Delete platform logo](https://docs.wirespeed.co/api-reference/team/delete-platform-logo.md)
- [Delete the current team and all associated data](https://docs.wirespeed.co/api-reference/team/delete-the-current-team-and-all-associated-data.md)
- [Detections created over time](https://docs.wirespeed.co/api-reference/team/detections-created-over-time.md)
- [Detections grouped by category](https://docs.wirespeed.co/api-reference/team/detections-grouped-by-category.md)
- [Detections grouped by endpoint/user group](https://docs.wirespeed.co/api-reference/team/detections-grouped-by-endpointuser-group.md)
- [Detections grouped by integration](https://docs.wirespeed.co/api-reference/team/detections-grouped-by-integration.md)
- [Escalated cases over time](https://docs.wirespeed.co/api-reference/team/escalated-cases-over-time.md)
- [Get all team-level API keys](https://docs.wirespeed.co/api-reference/team/get-all-team-level-api-keys.md)
- [Get all teams](https://docs.wirespeed.co/api-reference/team/get-all-teams.md)
- [Get all teams with slim payload](https://docs.wirespeed.co/api-reference/team/get-all-teams-with-slim-payload.md)
- [Get current team information](https://docs.wirespeed.co/api-reference/team/get-current-team-information.md)
- [Get distinct email domains of team members](https://docs.wirespeed.co/api-reference/team/get-distinct-email-domains-of-team-members.md): Returns the set of distinct email domains team members. Service accounts are excluded.
- [Get onboarding checklist items for the team](https://docs.wirespeed.co/api-reference/team/get-onboarding-checklist-items-for-the-team.md)
- [Get pending SKU change request for a client team](https://docs.wirespeed.co/api-reference/team/get-pending-sku-change-request-for-a-client-team.md)
- [Get pending SKU change request for current team](https://docs.wirespeed.co/api-reference/team/get-pending-sku-change-request-for-current-team.md)
- [Get platform logos](https://docs.wirespeed.co/api-reference/team/get-platform-logos.md)
- [Get service provider client aggregate stats](https://docs.wirespeed.co/api-reference/team/get-service-provider-client-aggregate-stats.md)
- [Get service provider teams search count](https://docs.wirespeed.co/api-reference/team/get-service-provider-teams-search-count.md): Returns total count of service provider client teams matching the same filters as the search endpoint.
- [Get system log search count](https://docs.wirespeed.co/api-reference/team/get-system-log-search-count.md)
- [Get team billable resource statistics](https://docs.wirespeed.co/api-reference/team/get-team-billable-resource-statistics.md)
- [Get team by any UUID](https://docs.wirespeed.co/api-reference/team/get-team-by-any-uuid.md)
- [Get team detection statistics](https://docs.wirespeed.co/api-reference/team/get-team-detection-statistics.md)
- [Get team endpoint operating system statistics](https://docs.wirespeed.co/api-reference/team/get-team-endpoint-operating-system-statistics.md)
- [Get team event statistics by integration](https://docs.wirespeed.co/api-reference/team/get-team-event-statistics-by-integration.md)
- [Get team geographic distribution statistics](https://docs.wirespeed.co/api-reference/team/get-team-geographic-distribution-statistics.md)
- [Get team member search count](https://docs.wirespeed.co/api-reference/team/get-team-member-search-count.md)
- [Invite user to team](https://docs.wirespeed.co/api-reference/team/invite-user-to-team.md)
- [List all SKU change requests (internal only)](https://docs.wirespeed.co/api-reference/team/list-all-sku-change-requests-internal-only.md)
- [List SKU change requests for child teams of the current SP](https://docs.wirespeed.co/api-reference/team/list-sku-change-requests-for-child-teams-of-the-current-sp.md)
- [Mark a self-attested onboarding item as complete](https://docs.wirespeed.co/api-reference/team/mark-a-self-attested-onboarding-item-as-complete.md)
- [Mean time to detect over time](https://docs.wirespeed.co/api-reference/team/mean-time-to-detect-over-time.md)
- [Mean time to respond over time](https://docs.wirespeed.co/api-reference/team/mean-time-to-respond-over-time.md)
- [Mean time to verdict over time](https://docs.wirespeed.co/api-reference/team/mean-time-to-verdict-over-time.md)
- [Noise reduction rate over time](https://docs.wirespeed.co/api-reference/team/noise-reduction-rate-over-time.md)
- [Public team sign-up endpoint](https://docs.wirespeed.co/api-reference/team/public-team-sign-up-endpoint.md)
- [Remove external user from team](https://docs.wirespeed.co/api-reference/team/remove-external-user-from-team.md)
- [Remove operating team](https://docs.wirespeed.co/api-reference/team/remove-operating-team.md)
- [Resend invitation to user](https://docs.wirespeed.co/api-reference/team/resend-invitation-to-user.md)
- [Reset default chat ops for a field](https://docs.wirespeed.co/api-reference/team/reset-default-chat-ops-for-a-field.md)
- [Search service provider teams](https://docs.wirespeed.co/api-reference/team/search-service-provider-teams.md)
- [Search system logs](https://docs.wirespeed.co/api-reference/team/search-system-logs.md)
- [Search team members](https://docs.wirespeed.co/api-reference/team/search-team-members.md)
- [Set or clear the billing license for a target type](https://docs.wirespeed.co/api-reference/team/set-or-clear-the-billing-license-for-a-target-type.md)
- [Switch to a different team](https://docs.wirespeed.co/api-reference/team/switch-to-a-different-team.md)
- [Update a client team subscription](https://docs.wirespeed.co/api-reference/team/update-a-client-team-subscription.md)
- [Update a SKU change request (cancel, accept, deny, or accept with modifications)](https://docs.wirespeed.co/api-reference/team/update-a-sku-change-request-cancel-accept-deny-or-accept-with-modifications.md)
- [Update team information](https://docs.wirespeed.co/api-reference/team/update-team-information.md)
- [Upload platform logo](https://docs.wirespeed.co/api-reference/team/upload-platform-logo.md)
- [Create new API key](https://docs.wirespeed.co/api-reference/users/create-new-api-key.md)
- [Delete API key](https://docs.wirespeed.co/api-reference/users/delete-api-key.md)
- [Delete user](https://docs.wirespeed.co/api-reference/users/delete-user.md)
- [Get current user information](https://docs.wirespeed.co/api-reference/users/get-current-user-information.md)
- [Get user API keys](https://docs.wirespeed.co/api-reference/users/get-user-api-keys.md)
- [Lock user account](https://docs.wirespeed.co/api-reference/users/lock-user-account.md)
- [Unlock user account](https://docs.wirespeed.co/api-reference/users/unlock-user-account.md)
- [Unsubscribe user from all notifications for current team](https://docs.wirespeed.co/api-reference/users/unsubscribe-user-from-all-notifications-for-current-team.md)
- [Update current user information](https://docs.wirespeed.co/api-reference/users/update-current-user-information.md)
- [Update user role](https://docs.wirespeed.co/api-reference/users/update-user-role.md)
- [Endpoints](https://docs.wirespeed.co/assets/endpoints.md): All endpoints available in your detection integrations are ingested into Wirespeed and correlated across cases. This allows you to identify repeat offenders over time, add special handling for critical assets, and provide Wirespeed more context for case triaging.
- [Files](https://docs.wirespeed.co/assets/files.md): Files from your detection integrations are analyzed to determine their nature—malicious or benign. Detection of malicious files considers factors such as the targeted endpoint or user, exclusion status, and findings from our threat intelligence sources.
- [IPs](https://docs.wirespeed.co/assets/ips.md): IP addresses are ingested from alerts on your detection integrations that have been previously identified by your detections vendor. Some may be benign and others may be malicious. Malicious IP addresses are determined by their usage of privacy-protecting services like Tor or VPNs and their countrie…
- [Locations](https://docs.wirespeed.co/assets/locations.md): A variety of alerts from your detection integrations include location information, usually related to the location of the asset or user triggering alerts. You may view all identified locations underneath Assets > Locations and investigate cases Wirespeed has triaged from each location.
- [Processes](https://docs.wirespeed.co/assets/processes.md): Process information is taken from your detection integrations when malicious commands are identified on your endpoints. Process information includes things like the command that was run, the SHA1 and SHA256 of the command, and any threat intelligence we are able to gather related to the process.
- [Users](https://docs.wirespeed.co/assets/users.md): Users are ingested from your directory integrations and enable ChatOps, VIP identification, and technical user identification.
- [Communication Plan](https://docs.wirespeed.co/chat-ops/communication-plan.md): Introduce your company to chat operations
- [Introduction to Chat Ops](https://docs.wirespeed.co/chat-ops/introduction.md): What is it and how to get started
- [I received a message from Wirespeed](https://docs.wirespeed.co/chat-ops/received-message.md): What should I do now?
- [Endpoint Containment](https://docs.wirespeed.co/containment/endpoints.md): Isolate servers and workstations
- [File Containment](https://docs.wirespeed.co/containment/files.md): Quarantine malicious files
- [Introduction to Containment](https://docs.wirespeed.co/containment/introduction.md): Automatic and manual isolation of compromised assets
- [User Containment](https://docs.wirespeed.co/containment/users.md): Automatically contain compromised users
- [Advanced Queries](https://docs.wirespeed.co/events/advanced-queries.md): Advanced queries and filtering
- [Custom Detections](https://docs.wirespeed.co/events/custom-detections.md): Write your own custom detections
- [Introduction to Events](https://docs.wirespeed.co/events/introduction.md): Ingest events, logs, and more from your source system into Wirespeed's SIEM
- [Exclusion Examples](https://docs.wirespeed.co/exclusions/examples.md): The art of exclusion writing and understanding trade-offs
- [Introduction to Exclusions](https://docs.wirespeed.co/exclusions/introduction.md): Automatically close cases based on natural language queries
- [Frequently Asked Questions](https://docs.wirespeed.co/faq.md): Answers to common questions from Wirespeed users
- [Introduction to Groups](https://docs.wirespeed.co/groups/introduction.md): Organize assets and control automation behavior with groups and rules
- [1Password](https://docs.wirespeed.co/integrations/1password.md): Monitor sign-in attempts, audit events, and item usage across your 1Password account
- [AWS](https://docs.wirespeed.co/integrations/aws.md): Integrate with AWS Guard Duty
- [Axonius](https://docs.wirespeed.co/integrations/axonius.md): Import endpoint and asset inventory from Axonius.
- [Bitwarden](https://docs.wirespeed.co/integrations/bitwarden.md): Monitor organization events including logins, policy changes, and user activity across your Bitwarden organization
- [Box](https://docs.wirespeed.co/integrations/box.md): Integrate with Box.com
- [Check Point Firewall (Quantum)](https://docs.wirespeed.co/integrations/checkpoint-firewall.md): Integrate with Check Point Firewall
- [Check Point Harmony (Avanan)](https://docs.wirespeed.co/integrations/checkpoint-harmony.md): Integrate with Check Point Harmony
- [Cisco Duo](https://docs.wirespeed.co/integrations/cisco-duo.md): Sync users, ingest authentication logs, and contain users from Cisco Duo
- [Cisco Meraki](https://docs.wirespeed.co/integrations/cisco-meraki.md): Forward Cisco Meraki logs to Wirespeed
- [Cisco Secure Access](https://docs.wirespeed.co/integrations/cisco-secure-access.md): Ingest DNS, Proxy, and ZTNA logs from Cisco Secure Access
- [Cisco Umbrella](https://docs.wirespeed.co/integrations/cisco-umbrella.md): Ingest DNS records from Cisco Umbrella
- [ConnectWise PSA](https://docs.wirespeed.co/integrations/connectwise-psa.md): Automate your MSSP interactions with Wirespeed and ConnectWise
- [CrowdStrike Falcon](https://docs.wirespeed.co/integrations/crowdstrike-falcon.md): Integrate with CrowdStrike Falcon
- [Darktrace](https://docs.wirespeed.co/integrations/darktrace.md): Ingest AI-powered network detections from Darktrace
- [Email](https://docs.wirespeed.co/integrations/email.md): Integrate with Email
- [Fortinet](https://docs.wirespeed.co/integrations/fortinet.md): Ingest firewall logs from Fortinet
- [Fortinet FortiAnalyzer](https://docs.wirespeed.co/integrations/fortinet-fortianalyzer.md): Ingest firewall logs from FortiAnalyzer
- [Generic JSON Logs](https://docs.wirespeed.co/integrations/generic-json.md): Ingest JSON logs from any source within your organization
- [Generic Syslog Logs](https://docs.wirespeed.co/integrations/generic-syslog.md): Ingest Syslog logs from any source within your organization
- [Google Alert Center](https://docs.wirespeed.co/integrations/google-alert-center.md): Integrate with Google Alert Center
- [Google Security Center](https://docs.wirespeed.co/integrations/google-security-center.md): Integrate with Google Cloud Security Command Center (SCC) to ingest findings
- [Google Workspace](https://docs.wirespeed.co/integrations/google-workspace.md): Integrate with Google Workspace
- [Halcyon](https://docs.wirespeed.co/integrations/halcyon.md): Import anti-ransomware alerts and manage endpoints from Halcyon
- [Halo ITSM](https://docs.wirespeed.co/integrations/halo-itsm.md): Integrate with Halo ITSM to automatically create and manage tickets from Wirespeed cases and detections
- [Have I Been Pwned](https://docs.wirespeed.co/integrations/have-i-been-pwned.md): Discover breached credentials for your team members
- [Horizon3 NodeZero](https://docs.wirespeed.co/integrations/horizon3.md): Integrate with Horizon3 NodeZero to verify whether detections can be correlated to pentest activity
- [Hyas Protect](https://docs.wirespeed.co/integrations/hyas-protect.md): Ingest DNS logs from Hyas Protect
- [Introduction to Integrations](https://docs.wirespeed.co/integrations/introduction.md): Connect your security stack to enable automated detection and response
- [IPinfo](https://docs.wirespeed.co/integrations/ipinfo.md): Enrich IP information
- [Jamf Pro](https://docs.wirespeed.co/integrations/jamf-pro.md): Integrate with Jamf Pro to identify devices in your organization
- [Jamf Protect](https://docs.wirespeed.co/integrations/jamf-protect.md): Integrate with Jamf Protect to identify devices and detections in your organization
- [Jira Cloud](https://docs.wirespeed.co/integrations/jira-cloud.md): Integrate with Jira Cloud to sync Wirespeed cases with your team
- [Jira Data Center](https://docs.wirespeed.co/integrations/jira-data-center.md): Integrate with Jira Data Center to sync Wirespeed cases with your team
- [JumpCloud](https://docs.wirespeed.co/integrations/jumpcloud.md): Ingest directory events and sync users and endpoints from JumpCloud
- [Kandji](https://docs.wirespeed.co/integrations/kandji.md): Sync your devices and threats from Kandji
- [ManageEngine ADAudit Plus](https://docs.wirespeed.co/integrations/manage-engine.md): Ingest syslog events from ManageEngine
- [Microsoft 365](https://docs.wirespeed.co/integrations/microsoft.md): Defender for Endpoint, Identity, Cloud, Cloud Apps, Sentinel, and more.
- [Microsoft On-Prem Active Directory](https://docs.wirespeed.co/integrations/microsoft-on-prem-active-directory.md): Active Directory integration when 100% on-premises
- [Microsoft Entra Sign-in Logs](https://docs.wirespeed.co/integrations/microsoft-sign-in-logs.md): Ingest sign-in logs from Microsoft Entra ID
- [Microsoft Teams](https://docs.wirespeed.co/integrations/microsoft-teams.md): Message users directly in Teams
- [Microsoft Windows](https://docs.wirespeed.co/integrations/microsoft-windows.md): Centralizing and forwarding Microsoft Windows telemetry
- [Mimecast](https://docs.wirespeed.co/integrations/mimecast.md): Integrate with Mimecast to pull email alerts into Wirespeed
- [Odoo Helpdesk](https://docs.wirespeed.co/integrations/odoo-helpdesk.md): Integrate with Odoo Helpdesk to automatically create and manage tickets from Wirespeed cases and detections
- [Okta](https://docs.wirespeed.co/integrations/okta.md): Ingest all users from your Okta directory
- [Orca Security](https://docs.wirespeed.co/integrations/orca-security.md): Ingest cloud security alerts from Orca Security
- [Palo Alto Networks Cortex](https://docs.wirespeed.co/integrations/palo-alto-networks-cortex.md): Import alerts and manage endpoints from Cortex XDR/XSIAM
- [Picus Security](https://docs.wirespeed.co/integrations/picus.md): Integrate with Picus Security to verify whether detections are tied to attack simulation activity
- [PingOne](https://docs.wirespeed.co/integrations/ping-one.md): Ingest PingOne audit activities and risk evaluations into Wirespeed
- [ReversingLabs](https://docs.wirespeed.co/integrations/reversing-labs.md): Automated file enrichment
- [SafeBreach](https://docs.wirespeed.co/integrations/safebreach.md): Integrate with SafeBreach to determine whether detections are tied to simulated attacks
- [SentinelOne](https://docs.wirespeed.co/integrations/sentinel-one.md): Automatically respond to all S1 detections
- [ServiceNow Change Requests](https://docs.wirespeed.co/integrations/service-now.md): Use ServiceNow change requests to automatically close endpoint detections tied to planned changes.
- [Slack](https://docs.wirespeed.co/integrations/slack.md): Communicate with your users directly in Slack
- [Custom SMTP](https://docs.wirespeed.co/integrations/smtp.md): Send ChatOps emails from your own domain
- [SonicWall](https://docs.wirespeed.co/integrations/sonic-wall.md): Integrate with SonicWall
- [Stairwell](https://docs.wirespeed.co/integrations/stairwell.md): Ingest Stairwell detection events via JSON webhook
- [Thinkst Canary](https://docs.wirespeed.co/integrations/thinkst-canary.md): Identify deception triggers in your environment
- [Vectra](https://docs.wirespeed.co/integrations/vectra.md): Ingest detections from Vectra
- [WatchGuard Firebox](https://docs.wirespeed.co/integrations/watchguard-firebox.md): Ingest logs from WatchGuard Firebox
- [Wiz](https://docs.wirespeed.co/integrations/wiz.md): Ingest cloud security findings from Wiz
- [Wordfence](https://docs.wirespeed.co/integrations/wordfence.md): Ingest alerts from Wordfence
- [Zscaler ZPA (Syslog)](https://docs.wirespeed.co/integrations/zscaler-zpa.md): Forward Zscaler ZPA logs to Wirespeed
- [Introduction](https://docs.wirespeed.co/introduction.md): Getting started with Wirespeed
- [Service Providers](https://docs.wirespeed.co/service-provider.md): Your guide to managing your clients on Wirespeed
- [Notifications](https://docs.wirespeed.co/settings/notifications.md): Understanding notification types and managing your notification preferences
- [Team Roles & Permissions](https://docs.wirespeed.co/settings/roles.md): Understanding team member roles and access levels
- [Team](https://docs.wirespeed.co/settings/team.md): Managing your team and users
- [Introduction to Verdicts](https://docs.wirespeed.co/verdicts/introduction.md): Customize how Wirespeed automatically handles your detections

## OpenAPI Specs

- [p-api-json](https://api.wirespeed.co/p-api-json)