Cortex XDR APIs

Incident Management

Get Extra Incident Data

Update an Incident

Insert CEF Alerts

Insert Parsed Alerts

Endpoint Management

Get All Endpoints

Delete Endpoints

Get Distribution Version

Create Distributions

Get Distribution Status

Get Distribution URL

Response Actions

File Retrieval Details

Quarantine Files

Get Quarantine Status

Allow List Files

Block List Files

Isolate Endpoints

Unisolate Endpoints

Cancel Scan Endpoints

Get Action Status

Rule Management

Insert Simple Indicators, CSV

Insert Simple Indicators, JSON

Script Execution

Get Script Metadata

Get Script Execution Status

Get Script Execution Results

Get Script Execution Result Files

Get Script Code

Run Snippet Code Script

Get Audit Agent Report

Get Audit Management Log