Cloud Onboarding Public APIs

Understand Cortex Cloud licenses
Get started with Cortex Cloud APIs
Create a new API key
Get your Cortex API key ID
Get your FQDN
Make your first API call
Cortex Cloud APIs
Cloud Onboarding Public APIs
Preface
Authentication methods
Cloud account management
Enable or disable cloud accounts
Get accounts in the specified integration instances
Cloud integration instance management
Create a cloud onboarding integration template
Delete the specified integration instances
Edit an integration instance
Enable or disable cloud integration instances
Get integration instance details
Get all or filtered integration instances
General
Get approved Azure tenants
Get available regions for a CSP
Outpost management
Create an outpost template
Edit an outpost
Application Security public APIs
Preface
Servers
Authentication methods
Integrations
Delete an AppSec integration
Get an AppSec integration
Get AppSec integrations
Update an AppSec integration
Labels
Get AppSec rule labels
Policies
Create an AppSec policy
Repositories
Get an AppSec repository scan configuration
Get an AppSec repository
Get AppSec repositories
Update an AppSec repository scan configuration
Repository branches
Get AppSec repository branches
Update an AppSec repository branch
Rules
Create or clone an AppSec rule
Delete an AppSec rule
Get an AppSec rule
Get AppSec rules
Modify an AppSec rule
Validate an AppSec rule
SBOM management
Get all SBOMs for the specified organization
Get an SBOM for the specified repository
Scan management
Get unscanned AppSec scan management repositories
Vulnerability Intelligence PAPI
Preface
Servers
Authentication methods
Affected software
Get affected software
Vulnerabilities
Get vulnerability details
Get list of vulnerabilities
Cloud Workload Protection APIs
Preface
Servers
Authentication methods
SBOM
Get the SBOM of the specified asset
Cortex XSIAM REST API
Preface
Servers
Authentication methods
Asset management
Remove Assets
Upload assets to the inventory
Bulk Update Vulnerability Tests
Get Internet Exposure
Get all Internet Exposures
Get External IP Address Range
Get all External IP Address Ranges
Get External Service
Get All Services
Get Website Details
Get All Websites
Get Websites Last Assessment
Get vulnerability tests
Attack Surface Rules
Get All Attack Surface Rules
Audit log
Get Audit Management Log
Get Audit Agent Report
Authentication settings
Create authentication settings for IdP SSO or metadata URL
Delete authentication settings by domain
Get IdP metadata
Get authentication settings for all configured domains
Update authentication settings
Cases
Get War Room entries
Add War Room entries
Dataset Management
Add a dataset
Delete a dataset
Get all datasets
Endpoints
Assign Tags
Create distributions
Delete Endpoints
Get Distribution URL
Get all Endpoints
Get Policy
Get Distribution status
Get Distribution version
Get Violations
Get Endpoint
Initiate Forensics Triage
Remove Tags
Set an Endpoint Alias
Lookup Datasets
Add or update data in a lookup dataset
Get data from a lookup dataset
Remove data from a lookup dataset
Response Action
Cancel Scan Endpoints
Allow List Files
Block List Files
File Retrieval Details
Get Action Status
Retrieve File
Isolate Endpoints
Get triage presets
Quarantine Files
Restore File
Scan Endpoints
Get Quarantine Status
Unisolate Endpoints
Script execution
Get Script Code
Get Script Execution Results
Get Script Execution Result Files
Get Script Execution Status
Get Script Metadata
Get Scripts
Run Script
Run Snippet Code Script
System management
System Health Check
Get Risk Score
Get Risky Hosts
Get Risky Users
Get Roles
Get User Groups
Get Users
Set a User Role
Get Tenant Info
XQL query
Get XQL query results
Get XQL query results Stream
Get XQL query Quota
Start an XQL query
XQL user datasets
Define an XQL user dataset
Delete an XQL user dataset
Get created XQL user datasets

Back to home page