Security

This section of the documentation contains reference information for Elastic Security features, including:

• Prebuilt rules
• Downloadable rule updates
• Prebuilt jobs
• Fields and object schemas

You can use these APIs to interface with Elastic Security features:

• Detections API: Manage detection rules and alerts
• Exceptions API: Create and manage rule exceptions
• Lists API: Create source event value lists for use with rule exceptions
• Timeline API: Import and export timelines
• Cases API: Open and manage cases
• Elastic AI Assistant API: Interact with and manage Elastic AI Assistant
• Asset criticality API: Create and manage asset criticality records