The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Riskware alert details request

Prev Next

Get details of the riskware alert specified by its ID. This API can be called after calling the previous API that returns a list of alert JSONs. This API should be called with the 'id' value returned in those JSONs.

GET https://<etp-instance>/api/v1/alerts/riskware/<id>

Required headers:

Content-Type: "application/json"—Content type of the request body.

If the domain you use you use to access the Trellix UI ends in fireeye.com:

x-fireeye-api-key: <key>—Specifies your personal API key.

If the domain you use to access the Trellix UI ends in trellix.com:

authorization: bearer <access_token>—Specifies your personal access token.

Important

Use authorization: bearer <access_token> in place of x-fireeye-api-key: <key> in the following examples.

Example of the request

GET https://<APIURI>/alerts/riskware/3yPuZf7-1123361-df969e9c-f833-410c-bfcc-b25e90c79944 -H 'x-fireeye-api-key: <APIKEY>'