Get a list of all your assets or a filtered list of your assets.
The maximum result limit is 5000 assets.
Required license: Cortex Xpanse Expander
authorization
String
required
{{api_key}}
x-xdr-auth-id
String
required
{{api_key_id}}
request_dataObject
A dictionary containing the API request fields. An empty dictionary returns all results.
filtersArray
An array of filter fields.
fieldString (Enum)
Identifies the assets field the filter is matching. Case-sensitive.
operatorString (Enum)
Identifies the comparison operator you want to use for this filter. Valid keywords and values are:
- contains / not_contains: use with externally_detected_providers
, externally_inferred_cves
, name
- eq / neq: use with name
, ip_address
, has_bu_overrides
.
- gte: Filters data from a specific timestamp onwards. Use with first_observed
, last_observed
.
- in: use with has_active_external_services
, type
, business_units_list
, ip_address
.
- lte: Filters data up to a specific timestamp. Use with first_observed
, last_observed
.
- range: Filters data between two specific timestamps.Use with first_observed
, last_observed
.
- relative_timestamp: Filters data relative to the current time (e.g., last 30 days). Use with first_observed
or last_observed
.
valueObject
Value depends on the filter field used.
- business_un*its_list: string or list of strings in the format "BU name" or "BU:BU name", for example “Acme & Co, Inc.” or “BU:Acme & Co, Inc.”
- *externally_detected_providers: string
- externally_inferred_cves: string
- first_observed — values in milliseconds format
- with gte or lte operator, specify a specific date or time as a timestamp in milliseconds format
- with range operator, specify "to" and "from" values as timestamps in milliseconds format
"value": { "from": "{{previous30Days}}","to": "{{previous7Days}}"
- with relative_timestamp operator, specify time interval to look back on (24H, 7D, 30D, etc.) as a value in milliseconds format
- has_active_external_services: list of strings (enum values: "yes", "no", "unknown")
- has_bu_overrides: boolean ("true" or "false")
- ip_address: list of strings
- ipv6_address: string
- last_observed — values in milliseconds format
- with gte or lte operator, specify a specific date or time as a timestamp in milliseconds format
- with range operator, specify "to" and "from" values as timestamps in milliseconds format, as follows
"value": { "from": "{{previous30Days}}","to": "{{previous7Days}}"
- with relative_timestamp operator, specify time interval to look back on (24H, 7D, 30D, etc.) as a value in milliseconds format
- name: string
- type: List of strings (enum values: "certificate", "cloud_integration", "cloud_compute_instance", "domain", "unassociated_responsive_ip")
- tags: List of strings indicating the tags to filter on in the format "tag-family:tag-name"
, for example "AR:registered to you"
.
- type: string
search_fromInteger
Represents the start offset index of results.
search_toInteger
An integer representing the start offset index of results. Use this field to specify the number of results on a page when using page token pagination.
Max value - 5000
sortObject
Identifies the sort order for the result set.
fieldString (Enum)
Case sensitive.
keywordString (Enum)
Case sensitive.
use_page_tokenBoolean
Use "use_page_token":true
in the initial request to paginate the response data.
next_page_tokenString
If "use_page_token":true
was included in the initial request, the response for that request will include a page token.
Use "next_page_token":"string"
to pass that page token into the next request to paginate the next set of data.'
{
"request_data": {
"search_from": 0,
"next_page_token": "next_page_token",
"filters": [
{
"field": "name",
"value": "AsmAssetsFilter_value",
"operator": "in"
},
{
"field": "name",
"value": "AsmAssetsFilter_value",
"operator": "in"
}
],
"sort": {
"field": "name",
"keyword": "asc"
},
"search_to": 0,
"use_page_token": true
}
}
{
"request_data": {
"filters": [
{
"field": "name",
"operator": "in",
"value": "string"
}
],
"search_from": 0,
"search_to": 500,
"sort": {
"field": "name",
"keyword": "asc"
},
"use_page_token": true,
"next_page_token": "string"
}
}
curl -X 'POST'
-H
'Accept: application/json'
-H
'Content-Type: application/json'
-H
'authorization: {{api_key}}'
-H
'x-xdr-auth-id: {{api_key_id}}'
'https://api-}/public_api/v1/assets/get_assets_internet_exposure/'
-d
'{
"request_data" : {
"search_from" : 0,
"next_page_token" : "next_page_token",
"filters" : [ {
"field" : "name",
"value" : "AsmAssetsFilter_value",
"operator" : "in"
}, {
"field" : "name",
"value" : "AsmAssetsFilter_value",
"operator" : "in"
} ],
"sort" : {
"field" : "name",
"keyword" : "asc"
},
"search_to" : 0,
"use_page_token" : true
}
}'