Cortex XDR APIs

List of available Cortex XDR APIs.

Start an XQL Query

Get XQL Query Results

Get XQL Query Results Stream

Get XQL Query Quota

Incident Management APIs

Get Extra Incident Data

Update an Incident

Insert CEF Alerts

Insert Parsed Alerts

Replace Featured Hosts

Replace Featured Users

Replace Featured IP Addresses

Replace Featured Active Directory Groups

Endpoint Management APIs

Get All Endpoints

Delete Endpoints

Get Distribution Version

Create Distributions

Get Distribution Status

Get Distribution URL

Response Action APIs

File Retrieval Details

Quarantine Files

Get Quarantine Status

Allow List Files

Block List Files

Isolate Endpoints

Unisolate Endpoints

Cancel Scan Endpoints

Get Action Status

Script Execution APIs

Get Script Metadata

Get Script Execution Status

Get Script Execution Results

Get Script Execution Result Files

Get Script Code

Run Snippet Code Script

Rule Management APIs

Insert Simple Indicators, CSV

Insert Simple Indicators, JSON

Get Audit Agent Report

Get Audit Management Log

Cortex XDR API Field Mapping