Get Installed Applications
GET {{baseUrl}}/web/api/v2.1/installed-applications?riskLevels=ex&agentIsDecommissioned=ex&publisher__contains=ex&skip=ex&sortOrder=ex&agentComputerName__contains=ex&agentOsVersion__contains=ex&version__contains=ex&ids=ex&osTypes=ex&name__contains=ex&siteIds=ex&sortBy=ex&groupIds=ex&limit=ex&size__between=ex&accountIds=ex&cursor=ex&agentMachineTypesNin=ex&types=ex&osTypesNin=ex&skipCount=ex&riskLevelsNin=ex&typesNin=ex&agentMachineTypes=ex&installedAt__between=ex&countOnly=ex&agentUuid__contains=ex
Get the applications, and their data (such as risk level), installed on endpoints with Application Risk-enabled Agents that match the filter. SentinelOne Application Risk lets you monitor applications installed on endpoints. Applications not updated with the latest patches are vulnerable to exploits. With SentinelOne Application Risk you can see all applications to be patched, on all endpoints or on a specific endpoint. The Agent takes a snapshot of the endpoint application data and checks for vulnerabilities in the SentinelOne Cloud. When the Agent detects a change to the application data, it sends a diff to the Management.
Application Risk requires Complete SKU. This feature is in EA. To join the EA program, contact your SentinelOne Sales Rep.
Request Params
Key | Datatype | Required | Description |
---|---|---|---|
riskLevels | string | Filter by risk. Example: "none". | |
agentIsDecommissioned | string | Include active agents, decommissioned or both. Example: "True,False". | |
publisher__contains | string | Free-text filter by application publisher (supports multiple values). Example: "Sentinel". | |
skip | string | Skip first number of items (0-1000). To iterate over more than 1000 items, use "cursor". Example: "150". | |
sortOrder | string | Sort direction. Example: "asc". | |
agentComputerName__contains | string | Free-text filter by computer name (supports multiple values). Example: "john-office,WIN". | |
agentOsVersion__contains | string | Free-text filter by OS full name and version (supports multiple values). Example: "Service Pack 1". | |
version__contains | string | Free-text filter by application version (supports multiple values). Example: "1.22.333,build". | |
ids | string | Filter by application IDs. Example: "225494730938493804,225494730938493915". | |
osTypes | string | Filter by OS types. Example: "macos". | |
name__contains | string | Free-text filter by application name (supports multiple values). Example: "calc". | |
siteIds | string | List of Site IDs to filter by. Example: "225494730938493804,225494730938493915". | |
sortBy | string | The column to sort the results by. Example: "id". | |
groupIds | string | List of Group IDs to filter by. Example: "225494730938493804,225494730938493915". | |
limit | string | Limit number of returned items (1-1000). Example: "10". | |
size__between | string | Filter by application size range (bytes). Example: "1024-104856". | |
accountIds | string | List of Account IDs to filter by. Example: "225494730938493804,225494730938493915". | |
cursor | string | Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: "YWdlbnRfaWQ6NTgwMjkzODE=". | |
agentMachineTypesNin | string | Filter not by endpoint machine types. Example: "unknown". | |
types | string | Filter by application types. Example: "app". | |
osTypesNin | string | Filter not by OS types. Example: "macos". | |
skipCount | string | If true, total number of items will not be calculated, which speeds up execution time. | |
riskLevelsNin | string | Filter not by risk. Example: "none". | |
typesNin | string | Filter not by application types. Example: "app". | |
agentMachineTypes | string | Filter by endpoint machine types. Example: "unknown". | |
installedAt__between | string | Filter by installation date range | |
countOnly | string | If true, only total number of items will be returned, without any of the actual objects. | |
agentUuid__contains | string | Free-text filter by agent UUID (supports multiple values). Example: "e92-01928,b055". |
HEADERS
Key | Datatype | Required | Description |
---|---|---|---|
Content-Type | null |