1-Secure Endpoint

Number of APIs: 73

This collection includes templates to query the Secure Enpoint API

Secure Endpoint and SecureX Architecture are providing different APIs to integrate and automate your Security Architecture.

1. APIv1 - queries-Events and Event Types - Computer Events by SHA256

GET https://{{amp4e_APIhost}}/v1/events?detection_sha256={{Observable_SHA256}}

---

2. APIv3 - queries-Device Control-DVC: remove configuration - Remove a DVC Configuration

DELETE https://{{amp4e_APIhost}}/v3/organizations/{{amp4e_ORG_identifier}}/device_control/configurations/{{amp4e_DVC_configurationGUID}}

---

3. Use Cases-Create and Delete Groups demo - 4-Generate Sub-Group

POST https://{{amp4e_APIhost}}/v1/groups

---

4. APIv1 - queries-Vulnerabilities (Hunting) - OS Vulnerabilities per Computer

GET https://{{amp4e_APIhost}}/v1/computers/{{amp4e_Connector_GUID}}/os_vulnerabilities

---

5. Initialize Variables - Initialize: Set Variables

GET https://api.amp.cisco.com/v1/webhook_subscriptions

---

6. Check Status - Check Status

GET https://api.amp.cisco.com/v1/groups

---

7. APIv1 - queries-Audit Logs - All Audit Log Types

GET https://{{amp4e_APIhost}}/v1/audit_log_types

---

8. APIv1 - queries-Audit Logs - Audit Log Type - AllowList

GET https://{{amp4e_APIhost}}/v1/audit_logs?audit_log_type=AllowList

---

9. APIv1 - queries-Computers - Search computer by name and store additional values

GET https://{{amp4e_APIhost}}/v1/computers?hostname=DESKTOP-CE01BL0

---

10. APIv1 - queries-Computers - Search computer by IP

GET https://{{amp4e_APIhost}}/v1/computers/{{amp4e_Connector_GUID}}

---