This URL retrieves the top endpoint executables.
Resource URL
GET /alerts/TopN/endpoint_executables
URL Parameters: None
Request Parameters
Payload Request Parameters: None
Query Parameters:
Field Name | Description | Data Type | Mandatory |
|---|---|---|---|
| Indicates the start time for the alerts. The default value is LAST_14_DAYS. Duration can be:
| String | No |
| Allowed values are:
Default value is endpointcount. | String | No |
| Confidence type can be:
Default value is malwareConfHigh. | String | No |
| Allowed values are:
Default value is any. | String | No |
Response Parameters
Following fields are returned.
Field Name | Description | Data Type |
|---|---|---|
| List of the top endpoint executables | Array |
Details of fields in TopEndpointExecutablesList:
Field Name | Description | Data Type |
|---|---|---|
name | Executable name | String |
fileHash | File hash | String |
count | Endpoint count | Number |
Example
Request
GET https://<NSM_IP>/sdkapi/alerts/TopN/endpoint_executables?duration=LAST_14_DAYS
Response
None
Response
{
"TopEndpointExecutablesList":[]
}Error Information
Following error codes are returned by this URL:
No | HTTP Error Code | SDK API errorId | SDK API errorMessage |
|---|---|---|---|
1 | 500 | 1001 | Internal error |
2 | 400 | 3601 | Invalid duration |