On Prem-CB EDR-Process Data

Number of APIs: 6

  1. Process Search GET {{cb_url}}/api/v1/process?q=chrome.exe&rows=1&start=0&sort=&facet=false&facet.field=process_name&facet.field=hostname&facet.field=process_md5

  2. Process Summary GET {{cb_url}}/api/v1/process/{{cb_process_id}}/{{cb_segment_id}}

  3. Process Segment Details GET {{cb_url}}/api/v1/process/{{cb_process_id}}/segment

  4. Process Event Details GET {{cb_url}}/api/v1/process/{{cb_process_id}}/{{cb_segment_id}}/event

  5. Process Preview GET {{cb_url}}/api/v1/process/{{cb_process_id}}/{{cb_segment_id}}/preview

  6. Collective Defense Cloud Query GET {{cb_url}}/api/v1/process/{{cb_process_id}}/{{cb_segment_id}}/threat_intel_hits