Configuration parameters
server— Server URL (e.g., https://192.168.0.1) (required)token— API Token (required)first_fetch_time— First fetch time range (<number> <time unit>, e.g., 1 hour, 30 minutes)c_score_gte— Fetch only Detections with greater/equal Certainty scoret_score_gte— Fetch Detections with a threat score greater than or equal tostate— Fetch only Detections with matching Statefetch_size— The number of results returned in each fetchisFetch— Fetch incidentsinsecure— Trust any certificate (not secure)incidentType— Incident typeproxy— Use system proxy settings
Commands (9)
-
vectra-get-detection-by-idDeprecatedReturns detections by detection ID.
-
vectra-get-detectionsDeprecatedReturns a list of detection objects, which contain all the information related to security events detected on the network.
-
vectra-get-host-by-idDeprecatedReturns a host by ID.
-
vectra-get-hostsDeprecatedReturns host information, which includes data that correlates the host data to detected security events.
-
vectra-get-proxiesDeprecatedRetrieves the current list of proxy IP addresses, or single proxy IP address by proxy ID.
-
vectra-get-threatfeedDeprecatedRetrieves the current list of all ThreatFeeds, or single ThreatFeed by ThreatFeed ID.
-
vectra-get-usersDeprecatedRetrieves the current list of Users.
-
vectra-searchDeprecatedRuns an advanced search on hosts and detections.
-
vectra-triageDeprecatedThe rules branch can be used to retrieve a listing of configured Triage rules.