Add to global list

Add a convicted threat to either the global quarantine or the global safe list for a particular tenant.

Service endpoint

/globallists/v2

Optional query string parameters

Example

https://protectapi.cylance.com/globallists/v2

Method

HTTP/1.1 POST

Request headers

  • Accept: application/json
  • Authorization: Bearer JWT Token returned by Auth API with the globallist:create scope encoded

Request

JSON
{
    "sha256": "bf17366ee3bb8068a9ad70fc9e68496e7e311a055bf4ffeeff53cc5d29ccce52",
    "list_type": "GlobalSafe",
    "category": "CommercialSoftware",
    "reason": "Test"
    "file_name":"Test File Name"
}

Response

Please see the Response status codes for more information.

Request JSON schema

Field Name Description

category

This field is required only if the list_type value is GlobalSafe. The value can be one of the following:

  • AdminTool
  • CommercialSoftware
  • Drivers
  • InternalApplication
  • OperatingSystem
  • SecuritySoftware
  • None

There are no spaces in the category name when adding to a global list.

file_name

This is an optional name for the threat. If a value is not specified, then the default value is the SHA256 value.

list_type

This is the list type that the threat belongs to (GlobalQuarantine or GlobalSafe).

reason

This is the reason why the file was added to the list.

sha256

This is the SHA256 hash for the threat.