Security endpoint management
Interact with and manage endpoints running the Elastic Defend integration.
27 endpoints
-
Get response actions
- GET /api/endpoint/action
-
Get an action request log
- GET /api/endpoint/action_log/{agent_id}
-
Get response actions status
- GET /api/endpoint/action_status
-
Get action details
- GET /api/endpoint/action/{action_id}
-
Get file information
- GET /api/endpoint/action/{action_id}/file/{file_id}
-
Download a file
- GET /api/endpoint/action/{action_id}/file/{file_id}/download
-
Run a command
- POST /api/endpoint/action/execute
-
Get a file
- POST /api/endpoint/action/get_file
-
Isolate an endpoint
- POST /api/endpoint/action/isolate
-
Isolate an endpoint
- POST /api/endpoint/isolate
-
Terminate a process
- POST /api/endpoint/action/kill_process
-
Get running processes
- POST /api/endpoint/action/running_procs
-
Run a script
- POST /api/endpoint/action/runscript
-
Scan a file or directory
- POST /api/endpoint/action/scan
-
Get actions state
- GET /api/endpoint/action/state
-
Suspend a process
- POST /api/endpoint/action/suspend_process
-
Release an isolated endpoint
- POST /api/endpoint/action/unisolate
-
Release an isolated endpoint
- POST /api/endpoint/unisolate
-
Upload a file
- POST /api/endpoint/action/upload
-
Get a metadata list
- GET /api/endpoint/metadata
-
Get metadata
- GET /api/endpoint/metadata/{id}
-
Get metadata transforms
- GET /api/endpoint/metadata/transforms
-
Get a policy response
- GET /api/endpoint/policy_response
-
Get an agent policy summary
- GET /api/endpoint/policy/summaries
-
Get a protection updates note
- GET /api/endpoint/protection_updates_note/{package_policy_id}
-
Create or update a protection updates note
- POST /api/endpoint/protection_updates_note/{package_policy_id}
-
Get suggestions
- POST /api/endpoint/suggestions/{suggestion_type}