Body Required

• agent_type string

  List of agent types to retrieve. Defaults to endpoint.

  Values are endpoint, sentinel_one, crowdstrike, or microsoft_defender_endpoint.

• alert_ids array[string(nonempty)]

  A list of alerts ids.

  At least 1 element. Minimum length of each is 1.

• case_ids array[string]

  Case IDs to be updated (cannot contain empty strings)

  At least 1 element. Minimum length of each is 1.

• comment string

  Optional comment

• endpoint_ids array[string] Required

  List of endpoint IDs (cannot contain empty strings)

  At least 1 element. Minimum length of each is 1.

• parameters object Required

  Optional parameters object

  Hide parameters attributes Show parameters attributes object

  • command string Required

    The command to be executed (cannot be an empty string)

    Minimum length is 1. Values are isolate, unisolate, kill-process, suspend-process, running-processes, get-file, execute, upload, or scan.

  • timeout integer

    The maximum timeout value in milliseconds (optional)

    Minimum value is 1.