Get Installed Applications

GET {{baseUrl}}/web/api/v2.1/installed-applications?riskLevels=ex&agentIsDecommissioned=ex&publisher__contains=ex&skip=ex&sortOrder=ex&agentComputerName__contains=ex&agentOsVersion__contains=ex&version__contains=ex&ids=ex&osTypes=ex&name__contains=ex&siteIds=ex&sortBy=ex&groupIds=ex&limit=ex&size__between=ex&accountIds=ex&cursor=ex&agentMachineTypesNin=ex&types=ex&osTypesNin=ex&skipCount=ex&riskLevelsNin=ex&typesNin=ex&agentMachineTypes=ex&installedAt__between=ex&countOnly=ex&agentUuid__contains=ex

Get the applications, and their data (such as risk level), installed on endpoints with Application Risk-enabled Agents that match the filter. SentinelOne Application Risk lets you monitor applications installed on endpoints. Applications not updated with the latest patches are vulnerable to exploits. With SentinelOne Application Risk you can see all applications to be patched, on all endpoints or on a specific endpoint. The Agent takes a snapshot of the endpoint application data and checks for vulnerabilities in the SentinelOne Cloud. When the Agent detects a change to the application data, it sends a diff to the Management.
Application Risk requires Complete SKU. This feature is in EA. To join the EA program, contact your SentinelOne Sales Rep.

Request Params

KeyDatatypeRequiredDescription
riskLevelsstringFilter by risk. Example: "none".
agentIsDecommissionedstringInclude active agents, decommissioned or both. Example: "True,False".
publisher__containsstringFree-text filter by application publisher (supports multiple values). Example: "Sentinel".
skipstringSkip first number of items (0-1000). To iterate over more than 1000 items, use "cursor". Example: "150".
sortOrderstringSort direction. Example: "asc".
agentComputerName__containsstringFree-text filter by computer name (supports multiple values). Example: "john-office,WIN".
agentOsVersion__containsstringFree-text filter by OS full name and version (supports multiple values). Example: "Service Pack 1".
version__containsstringFree-text filter by application version (supports multiple values). Example: "1.22.333,build".
idsstringFilter by application IDs. Example: "225494730938493804,225494730938493915".
osTypesstringFilter by OS types. Example: "macos".
name__containsstringFree-text filter by application name (supports multiple values). Example: "calc".
siteIdsstringList of Site IDs to filter by. Example: "225494730938493804,225494730938493915".
sortBystringThe column to sort the results by. Example: "id".
groupIdsstringList of Group IDs to filter by. Example: "225494730938493804,225494730938493915".
limitstringLimit number of returned items (1-1000). Example: "10".
size__betweenstringFilter by application size range (bytes). Example: "1024-104856".
accountIdsstringList of Account IDs to filter by. Example: "225494730938493804,225494730938493915".
cursorstringCursor position returned by the last request. Use to iterate over more than 1000 items. Example: "YWdlbnRfaWQ6NTgwMjkzODE=".
agentMachineTypesNinstringFilter not by endpoint machine types. Example: "unknown".
typesstringFilter by application types. Example: "app".
osTypesNinstringFilter not by OS types. Example: "macos".
skipCountstringIf true, total number of items will not be calculated, which speeds up execution time.
riskLevelsNinstringFilter not by risk. Example: "none".
typesNinstringFilter not by application types. Example: "app".
agentMachineTypesstringFilter by endpoint machine types. Example: "unknown".
installedAt__betweenstringFilter by installation date range
countOnlystringIf true, only total number of items will be returned, without any of the actual objects.
agentUuid__containsstringFree-text filter by agent UUID (supports multiple values). Example: "e92-01928,b055".

HEADERS

KeyDatatypeRequiredDescription
Content-Typenull