---
type: api
title: Security endpoint management
description: Interact with and manage endpoints running the Elastic Defend integration.
url: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/group/endpoint-security-endpoint-management-api
resource: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/group/endpoint-security-endpoint-management-api
products:
  - Kibana
---

# Security endpoint management

`Security Endpoint Management API`

Interact with and manage endpoints running the Elastic Defend integration.

- [Get response actions](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointgetactionslist): `GET` `/api/endpoint/action`, `GET` `/s/{space_id}/api/endpoint/action`
- [Get response actions status](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointgetactionsstatus): `GET` `/api/endpoint/action_status`, `GET` `/s/{space_id}/api/endpoint/action_status`
- [Get action details](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointgetactionsdetails): `GET` `/api/endpoint/action/{action_id}`, `GET` `/s/{space_id}/api/endpoint/action/{action_id}`
- [Get file information](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointfileinfo): `GET` `/api/endpoint/action/{action_id}/file/{file_id}`, `GET` `/s/{space_id}/api/endpoint/action/{action_id}/file/{file_id}`
- [Download a file](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointfiledownload): `GET` `/api/endpoint/action/{action_id}/file/{file_id}/download`, `GET` `/s/{space_id}/api/endpoint/action/{action_id}/file/{file_id}/download`
- [Cancel a response action](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-cancelaction): `POST` `/api/endpoint/action/cancel`, `POST` `/s/{space_id}/api/endpoint/action/cancel`
- [Run a command](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointexecuteaction): `POST` `/api/endpoint/action/execute`, `POST` `/s/{space_id}/api/endpoint/action/execute`
- [Get a file](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointgetfileaction): `POST` `/api/endpoint/action/get_file`, `POST` `/s/{space_id}/api/endpoint/action/get_file`
- [Isolate an endpoint](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointisolateaction): `POST` `/api/endpoint/action/isolate`, `POST` `/s/{space_id}/api/endpoint/action/isolate`
- [Terminate a process](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointkillprocessaction): `POST` `/api/endpoint/action/kill_process`, `POST` `/s/{space_id}/api/endpoint/action/kill_process`
- [Generate a memory dump from the host machine](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointgeneratememorydump): `POST` `/api/endpoint/action/memory_dump`, `POST` `/s/{space_id}/api/endpoint/action/memory_dump`
- [Run a script](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-runscriptaction): `POST` `/api/endpoint/action/run_script`, `POST` `/s/{space_id}/api/endpoint/action/run_script`
- [Get running processes](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointgetprocessesaction): `POST` `/api/endpoint/action/running_procs`, `POST` `/s/{space_id}/api/endpoint/action/running_procs`
- [Scan a file or directory](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointscanaction): `POST` `/api/endpoint/action/scan`, `POST` `/s/{space_id}/api/endpoint/action/scan`
- [Get actions state](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointgetactionsstate): `GET` `/api/endpoint/action/state`, `GET` `/s/{space_id}/api/endpoint/action/state`
- [Suspend a process](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointsuspendprocessaction): `POST` `/api/endpoint/action/suspend_process`, `POST` `/s/{space_id}/api/endpoint/action/suspend_process`
- [Release an isolated endpoint](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointunisolateaction): `POST` `/api/endpoint/action/unisolate`, `POST` `/s/{space_id}/api/endpoint/action/unisolate`
- [Upload a file](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointuploadaction): `POST` `/api/endpoint/action/upload`, `POST` `/s/{space_id}/api/endpoint/action/upload`
- [Get a metadata list](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-getendpointmetadatalist): `GET` `/api/endpoint/metadata`, `GET` `/s/{space_id}/api/endpoint/metadata`
- [Get metadata](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-getendpointmetadata): `GET` `/api/endpoint/metadata/{id}`, `GET` `/s/{space_id}/api/endpoint/metadata/{id}`
- [Get a policy response](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-getpolicyresponse): `GET` `/api/endpoint/policy_response`, `GET` `/s/{space_id}/api/endpoint/policy_response`
- [Get a protection updates note](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-getprotectionupdatesnote): `GET` `/api/endpoint/protection_updates_note/{package_policy_id}`, `GET` `/s/{space_id}/api/endpoint/protection_updates_note/{package_policy_id}`
- [Create or update a protection updates note](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-createupdateprotectionupdatesnote): `POST` `/api/endpoint/protection_updates_note/{package_policy_id}`, `POST` `/s/{space_id}/api/endpoint/protection_updates_note/{package_policy_id}`
- [Get a list of scripts](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointscriptlibrarylistscripts): `GET` `/api/endpoint/scripts_library`, `GET` `/s/{space_id}/api/endpoint/scripts_library`
- [Create script](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointscriptlibrarycreatescript): `POST` `/api/endpoint/scripts_library`, `POST` `/s/{space_id}/api/endpoint/scripts_library`
- [Delete a script](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointscriptlibrarydeletescript): `DELETE` `/api/endpoint/scripts_library/{script_id}`, `DELETE` `/s/{space_id}/api/endpoint/scripts_library/{script_id}`
- [Get script](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointscriptlibrarygetonescript): `GET` `/api/endpoint/scripts_library/{script_id}`, `GET` `/s/{space_id}/api/endpoint/scripts_library/{script_id}`
- [Update script](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointscriptlibrarypatchupdatescript): `PATCH` `/api/endpoint/scripts_library/{script_id}`, `PATCH` `/s/{space_id}/api/endpoint/scripts_library/{script_id}`
- [Download a script file](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-endpointscriptlibrarydownloadscript): `GET` `/api/endpoint/scripts_library/{script_id}/download`, `GET` `/s/{space_id}/api/endpoint/scripts_library/{script_id}/download`