1. Home
Location
    Techdocs Logo Techdocs Logo
    • Documentation Home
    • Palo Alto Networks
    • Support
    • Live Community
    • Knowledge Base
    1. Home
    2. Security Operations
    3. Cortex XDR
    4. Cortex XDR™ API Reference
    PDF Cover Image
    Download PDF
    Last Updated:
    Thu May 19 00:03:25 PDT 2022

    Table of Contents


    Search the Table of Contents
    copyright
    copyright
    Cortex XDR APIs Overview
    Get Started with Cortex XDR APIs
    Cortex XDR APIs
    XQL Query APIs
    Start an XQL Query
    Get XQL Query Results
    Get XQL Query Results Stream
    Get XQL Query Quota
    Incident Management APIs
    Get Incidents
    Get Extra Incident Data
    Update an Incident
    Get Alerts
    Retrieve PCAP Packet
    Insert CEF Alerts
    Insert Parsed Alerts
    Replace Featured Hosts
    Replace Featured Users
    Replace Featured IP Addresses
    Replace Featured Active Directory Groups
    Endpoint Management APIs
    Get All Endpoints
    Get Endpoint
    Delete Endpoints
    Get Policy
    Get Violations
    Create Distributions
    Get Distribution Version
    Get Distribution Status
    Get Distribution URL
    Set an Endpoint Alias
    Assign Tags
    Remove Tags
    Response Action APIs
    Restore File
    Retrieve File
    File Retrieval Details
    Quarantine Files
    Get Quarantine Status
    Allow List Files
    Block List Files
    Isolate Endpoints
    Unisolate Endpoints
    Scan Endpoints
    Cancel Scan Endpoints
    Get Action Status
    Script Execution APIs
    Get Scripts
    Get Script Metadata
    Get Script Execution Status
    Get Script Execution Results
    Get Script Execution Result Files
    Get Script Code
    Run Script
    Run Snippet Code Script
    Rule Management APIs
    Insert Simple Indicators, CSV
    Insert Simple Indicators, JSON
    Audit Log APIs
    Get Audit Agent Report
    Get Audit Management Log
    System Management APIs
    System Health Check
    Cortex XDR API Field Mapping
    • copyright
      • copyright
    • Cortex XDR APIs Overview
      • Get Started with Cortex XDR APIs
    • Cortex XDR APIs
      • XQL Query APIs
        • Start an XQL Query
        • Get XQL Query Results
        • Get XQL Query Results Stream
        • Get XQL Query Quota
      • Incident Management APIs
        • Get Incidents
        • Get Extra Incident Data
        • Update an Incident
        • Get Alerts
        • Retrieve PCAP Packet
        • Insert CEF Alerts
        • Insert Parsed Alerts
        • Replace Featured Hosts
        • Replace Featured Users
        • Replace Featured IP Addresses
        • Replace Featured Active Directory Groups
      • Endpoint Management APIs
        • Get All Endpoints
        • Get Endpoint
        • Delete Endpoints
        • Get Policy
        • Get Violations
        • Create Distributions
        • Get Distribution Version
        • Get Distribution Status
        • Get Distribution URL
        • Set an Endpoint Alias
        • Assign Tags
        • Remove Tags
      • Response Action APIs
        • Restore File
        • Retrieve File
        • File Retrieval Details
        • Quarantine Files
        • Get Quarantine Status
        • Allow List Files
        • Block List Files
        • Isolate Endpoints
        • Unisolate Endpoints
        • Scan Endpoints
        • Cancel Scan Endpoints
        • Get Action Status
      • Script Execution APIs
        • Get Scripts
        • Get Script Metadata
        • Get Script Execution Status
        • Get Script Execution Results
        • Get Script Execution Result Files
        • Get Script Code
        • Run Script
        • Run Snippet Code Script
      • Rule Management APIs
        • Insert Simple Indicators, CSV
        • Insert Simple Indicators, JSON
      • Audit Log APIs
        • Get Audit Agent Report
        • Get Audit Management Log
      • System Management APIs
        • System Health Check
      • Cortex XDR API Field Mapping

    Cortex XDR™ API Reference


    PDF Cover Image
    Download PDF
    Last Updated:
    Thu May 19 00:03:25 PDT 2022

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo