post
/public_api/v1/scripts/get_script_execution_results_files
Get the files retrieved from a specific endpoint during a script execution.
Required license: Cortex XDR Pro per Endpoint or Cortex XDR Pro per GB
CURL
curl -X POST \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
"https://api-yourfqdn/public_api/v1/scripts/get_script_execution_results_files" \
-d '{
"request_data" : {
"action_id" : "action_id",
"endpoint_id" : "endpoint_id"
}
}'
Response
{
"reply": {
"DATA": "https://example-link"
}
}
Request
Body
optional
request_data
required
A dictionary containing the API request fields.
action_id
required
String
Identifier of the action, can be found in Cortex XDR console Response > Action Center > Action ID field.
endpoint_id
required
String
Endpoint ID.
Responses