SIEM endpoints

Use the references for REST API 12.1 SIEM endpoints.

GET /siem/local_destination_addresses
Retrieve a list offense local destination addresses currently in the system.
GET /siem/local_destination_addresses/{local_destination_address_id}
Retrieve an offense local destination address.
GET /siem/offense_closing_reasons
Retrieve a list of all offense closing reasons.
POST /siem/offense_closing_reasons
Create an offense closing reason.
GET /siem/offense_closing_reasons/{closing_reason_id}
Retrieve an offense closing reason.
GET /siem/offense_saved_search_delete_tasks/{task_id}
Retrieves the delete the offense saved search task status.
GET /siem/offense_saved_search_dependent_tasks/{task_id}
Retrieves the dependent the offense saved search task status.
POST /siem/offense_saved_search_dependent_tasks/{task_id}
Cancels the dependent the offense saved search task.
GET /siem/offense_saved_search_dependent_tasks/{task_id}/results
Retrieves the offense saved search dependent task results.
GET /siem/offense_saved_search_groups
Retrieves a list of offense saved search groups.
DELETE /siem/offense_saved_search_groups/{group_id}
Deletes an offense saved search group.
GET /siem/offense_saved_search_groups/{group_id}
Retrieves an offense saved search group.
POST /siem/offense_saved_search_groups/{group_id}
Updates the owner of an offense saved search group.
GET /siem/offense_saved_searches
Retrieves a list of offense saved searches.
DELETE /siem/offense_saved_searches/{id}
Deletes an offense saved search. To ensure safe deletion, a dependency check is carried out. This check might take some time. An asynchronous task to do is started for this check.
GET /siem/offense_saved_searches/{id}
Retrieves an offense saved search.
POST /siem/offense_saved_searches/{id}
Updates the offense saved search owner only.
GET /siem/offense_saved_searches/{id}/dependents
Retrieves the objects that depend on an offense saved search.
GET /siem/offense_types
Retrieve all the Offense Types
GET /siem/offense_types/{offense_type_id}
Retrieve an offense type structure that describes the properties of an offense type.
GET /siem/offenses
Retrieve a list of offenses currently in the system.
GET /siem/offenses/{offense_id}
Retrieve an offense structure that describes properties of an offense
POST /siem/offenses/{offense_id}
Update an offense.
GET /siem/offenses/{offense_id}/notes
Retrieve a list of notes for an offense.
POST /siem/offenses/{offense_id}/notes
Create a note on an offense.
GET /siem/offenses/{offense_id}/notes/{note_id}
Retrieve a note for an offense.
GET /siem/source_addresses
Retrieve a list offense source addresses currently in the system.
GET /siem/source_addresses/{source_address_id}
Retrieve an offense source address.