Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
Security Operations
Cortex XDR
Cortex XDR™ API Reference

Last Updated:

Thu May 19 00:03:25 PDT 2022

Table of Contents

Search the Table of Contents

copyright

copyright

Cortex XDR APIs Overview

Get Started with Cortex XDR APIs

Cortex XDR APIs

XQL Query APIs

Start an XQL Query

Get XQL Query Results

Get XQL Query Results Stream

Get XQL Query Quota

Incident Management APIs

Get Incidents

Get Extra Incident Data

Update an Incident

Get Alerts

Retrieve PCAP Packet

Insert CEF Alerts

Insert Parsed Alerts

Replace Featured Hosts

Replace Featured Users

Replace Featured IP Addresses

Replace Featured Active Directory Groups

Endpoint Management APIs

Get All Endpoints

Get Endpoint

Delete Endpoints

Get Policy

Get Violations

Create Distributions

Get Distribution Version

Get Distribution Status

Get Distribution URL

Set an Endpoint Alias

Assign Tags

Remove Tags

Response Action APIs

Restore File

Retrieve File

File Retrieval Details

Quarantine Files

Get Quarantine Status

Allow List Files

Block List Files

Isolate Endpoints

Unisolate Endpoints

Scan Endpoints

Cancel Scan Endpoints

Get Action Status

Script Execution APIs

Get Scripts

Get Script Metadata

Get Script Execution Status

Get Script Execution Results

Get Script Execution Result Files

Get Script Code

Run Script

Run Snippet Code Script

Rule Management APIs

Insert Simple Indicators, CSV

Insert Simple Indicators, JSON

Audit Log APIs

Get Audit Agent Report

Get Audit Management Log

System Management APIs

System Health Check

Cortex XDR API Field Mapping

copyright
- copyright
Cortex XDR APIs Overview
- Get Started with Cortex XDR APIs
Cortex XDR APIs

Cortex XDR™ API Reference

PDF Cover Image

Last Updated:

Thu May 19 00:03:25 PDT 2022

© 2022 Palo Alto Networks, Inc. All rights reserved.