Other Sites
ArcticWolf.com
Unified Portal
Arctic Circle Community
Technical Support Knowledge Base
Request a Demo
Internal Documentation
Aurora Endpoint Security
Managed Detection and Response (MDR)
Managed Risk
Managed Security Awareness (MA)
Incident Readiness and Response
Arctic Wolf Unified Portal
MSP Portal
Authentication
Sensors, Scanners, and Log Collectors
Arctic Wolf Agent
Onboarding Portal
Active Response, Log Forwarding, and Security Monitoring
Active Directory
Cloud Security Posture Management (CSPM)
IT Service Management (ITSM)
Developer and OEM
Product Updates
Additional Information about Products and Services
Legacy Risk Dashboard
Legacy Analytics
Search
English
日本語
Deutsch
Français
Sign In
Sections
Aurora Endpoint Security
Managed Detection and Response (MDR)
Managed Risk
Managed Security Awareness (MA)
Incident Readiness and Response
Arctic Wolf Unified Portal
MSP Portal
Authentication
Sensors, Scanners, and Log Collectors
Arctic Wolf Agent
Onboarding Portal
Active Response, Log Forwarding, and Security Monitoring
Active Directory
Cloud Security Posture Management (CSPM)
IT Service Management (ITSM)
Developer and OEM
Product Updates
Additional Information about Products and Services
Legacy Risk Dashboard
Legacy Analytics
English
English
日本語
Deutsch
Français
Developer and OEM
Developer and OEM
Aurora Endpoint Defense API
Application management
Add an application
Edit an application
Delete an application
Regenerate an application control
API in audit logs
RESTful API
Authentication
Authentication token
Generate the authentication and access tokens
Token lifecycle
Request and response model
Service endpoint
Find file checksum
Threat classifications
Scope values for authentication token
Authorization
Access token
Response status codes
API and management console rate limit
API Tools
About device ID
About zone ID
User API
Create user
Get users
Get user
Update user
Delete user
Send invite email
Send request password email
Device API
Get devices
Get devices extended
Get device count
Get device
Get device by MAC address
Get device by hostname
Update device
Get device threat
Update device threat
Get zone devices
Get agent installer link
Delete Devices
Get Device Lifecycle Management settings
Update Device Lifecycle Management Settings
Exempt devices from the Device Lifecycle Management process
Include devices in the Device Lifecycle Management process
Reset the inactive period for a list of devices that are included in the Device Lifecycle Management process
Global list API
Get global list
Add to global list
Delete from global list
Get safe scripts
Add safe script entry
Delete safe script entry
Policy API
Get policies
Get policy
Create policy
Update policy
Delete policy
Delete policies
Zone API
Create zone
Get zones
Get zone
Get device zones
Update zone
Delete zone
Threat API
Get threats
Get threat
Get threat devices
Get threat download URL
Memory protection API
Get memory protection events
Get memory protection event
Memory violation types
Detections API
Get detections
Get detection
Get recent detections
Get detections .csv
Get detections by severity
Update detection
Delete detection
Delete detections
Package deployment API
Create package
Get packages
Get package
Delete package
Create package execution
Get package executions
Get package execution
Delete package execution
Detection rule API
Get Detection Rule List
Get detection rule .csv list
Get detection rule
Validate detection rule
Create detection rule
Update detection rule
Deactivate or delete detection rule
Get detection rule natural language representation
Get detection rule counts
Detection rule sets API
Get detection rule set list
Get detection rule set .csv list
Get detection rule set
Create detection rule set
Retrieve default detection rule set
Update detection rule set
Delete detection rule set
Delete multiple detection rule sets
Detection exceptions API
Get detection exceptions list
Get detection exception .csv list
Get detection exception content
Create detection exception
Update detection exception
Deactivate or delete detection exception
Device commands API
Lockdown device command
Get device lockdown history
Get retrieved file results
Request file retrieval from device
Check file retrieval status from device
Focus view API
Get focus view list
Search for focus view results
Request a focus view
Get a focus view summary
Get focus view results
InstaQuery API
Get InstaQueries
Create InstaQuery
Get InstaQuery
Get InstaQuery results
Archive InstaQuery
Aurora Focus policy API
Get detection rule sets to policy mapping
Get detection rule set for a policy
Update a detection rule set in a policy
Lockdown configurations API
Get lockdown configurations
Get lockdown configuration
Create lockdown configuration
Update lockdown configuration
Delete lockdown configuration
Home
▸
Developer and OEM
▸
Aurora Endpoint Defense API
Share this page
LinkedIn
X
Facebook
Email
Copy Topic URL
Print page
Print page
Print page and subpages
Zone API
A zone is a way to organize and manage devices.
Aurora Endpoint Security
User Guide
API
Public
Last updated: March 30, 2026