Get device threat

Request a page with a list of threats found on a specific device. The page number and page size parameters are optional. When the values are not specified, these default to 1 and 10 respectively. The maximum page size that can be specified is 200 entries per page.

Service endpoint

/devices/v2/{unique_device_id}/threats?page=m&page_size=n

Optional query string parameters
  • page: The page number to request.
  • page_size: The number of device records to retrieve per page.

Example

https://protectapi.cylance.com/devices/v2/e378dacb-9324-453a-b8c6-5a8406952195/threats?page=1&page_size=100

Method

HTTP/1.1 GET

Request headers
  • Accept: application/json
  • Authorization: Bearer JWT Token returned by Auth API with the device:threatlist scope encoded

Request

None

Response

For more information, see Response status codes.

Response JSON schema

Field Name Description

classification

The threat classification that Aurora Endpoint Defense assigned.

cylance_score

The Aurora Endpoint Defense score assigned to the threat. The User API returns a raw score of -1 to 1. Threats have a negative raw score, while safe files have a positive raw score. The Aurora Endpoint Security console only displays threats and uses a score of 1 to 100. A raw score of -1 equals a console score of 100.

date_found

The date and time when the threat was found on the device, in UTC.

file_path

The filepath to the threat, which includes the filename.

file_status

The current status of the file on the device:

  • Default (0) (Unsafe)
  • Quarantined (1)
  • Whitelisted (2)
  • Suspicious (3) (Abnormal)
  • File Removed (4) (Delete) — The file was removed from the console.
  • Corrupt (5) — The file could not be scanned. The file could be corrupt or malformed.

name

The name of the threat.

page_number

The page number requested.

page_size

The page size requested.

sha256

The SHA256 hash for the threat.

sub_classification

The threat sub-classification that Aurora Endpoint Defenseassigned.

total_pages

The total number of pages that can be retrieved, based on the page size specified.

total_number_of_items

The total number of resource.