Security & Identity · CONNECTION

Sekoia.io + NodeHub

Work Sekoia.io XDR alerts, cases, detection rules, event searches, assets, playbooks, notebooks and threat intelligence.

Explore 434 workflow actions for Sekoia.io, including account permissions and operation limits.

247 read actions187 write actions

WORKFLOW ACTIONS

What you can configure.

Choose an action in the workflow builder, connect an account, and map its inputs. These actions are available in the catalog; your account access and a successful test determine whether they work for your setup.

Activate a countermeasure

Write

Activate a countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Activate a playbook

Write

Activate a playbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Activate an action step of a countermeasure

Write

Activate an action step of a countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Add a new alert filter to a rule

Write

Add a new alert filter to a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Add a new alert filter to a rule (multi-tenant)

Write

Add a new alert filter to a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Add alerts to a case

Write

Add alerts to a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Add an asset tag

Write

Add an asset tag.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Add events to a case

Write

Add events to a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Add tags in bulk

Write

Add tags in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Apply a case template to cases

Write

Apply a case template to cases.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Assign role to avatar of the community

Write

Assign role to avatar of the community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Associate new alerts on a case

Write

Associate new alerts on a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Attach a detection property

Write

Attach a detection property.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Bulk Delete

Write

Bulk Delete.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Bulk get objects

Read

Bulk get objects.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Bulk search observables

Read

Bulk search observables.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Bulk Update

Write

Bulk Update.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Bulk update vulnerability statuses for an asset

Write

Bulk update vulnerability statuses for an asset.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Cancel execution

Write

Cancel execution.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Change assets criticality in bulk

Write

Change assets criticality in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Consume a feed of object relationships

Read

Consume a feed of object relationships.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Consume a feed of objects

Read

Consume a feed of objects.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Consume a feed of observables

Read

Consume a feed of observables.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Count an asset's applications

Read

Count an asset's applications.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Count an asset's open vulnerabilities

Read

Count an asset's open vulnerabilities.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Count assets

Read

Count assets.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Count avatars of a community

Write

Count avatars of a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Count indicators covered by detection rules

Read

Count indicators covered by detection rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Count indicators in a community

Read

Count indicators in a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Count observables

Read

Count observables.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Count the total number of alerts matching the provided filters

Read

Count the total number of alerts matching the provided filters.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Create a case custom view

Write

Create a case custom view.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a comment on a countermeasure

Write

Create a comment on a countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new case

Write

Create a new case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new case template

Write

Create a new case template.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new comment on a case

Write

Create a new comment on a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new countermeasure for the alert

Write

Create a new countermeasure for the alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new countermeasure for the case

Write

Create a new countermeasure for the case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new custom field

Write

Create a new custom field.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new custom priority

Write

Create a new custom priority.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new custom status

Write

Create a new custom status.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new custom verdict

Write

Create a new custom verdict.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new dashboard

Write

Create a new dashboard.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new generation mode

Write

Create a new generation mode.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new intake

Write

Create a new intake.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new IOC collection

Write

Create a new IOC collection.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new optimization rule

Write

Create a new optimization rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new role in the community

Write

Create a new role in the community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new rule

Write

Create a new rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new rule (multi-tenant)

Write

Create a new rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a new set of countermeasures

Write

Create a new set of countermeasures.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create a playbook

Write

Create a playbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create an asset

Write

Create an asset.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create an event search job

Write

Create an event search job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create an intake format

Write

Create an intake format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create new entity

Write

Create new entity.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create or update an action step in the countermeasure (sic alerts) patch

Write

Create or update an action step in the countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create or update an action step in the countermeasure (sic alerts) put

Write

Create or update an action step in the countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create or update community settings

Write

Create or update community settings.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Create Query Parameter

Write

Create Query Parameter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Creates an export job

Write

Creates an export job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Deactivate a playbook

Write

Deactivate a playbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a case

Write

Delete a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a case custom view

Write

Delete a case custom view.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a case template

Write

Delete a case template.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a comment from a case

Write

Delete a comment from a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a comment on an alert

Write

Delete a comment on an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a custom field based on its UUID

Write

Delete a custom field based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a custom priority based on its UUID

Write

Delete a custom priority based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a custom status based on its UUID

Write

Delete a custom status based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a custom verdict based on its UUID

Write

Delete a custom verdict based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a format revision

Write

Delete a format revision.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a generation mode

Write

Delete a generation mode.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a label

Write

Delete a label.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a module

Write

Delete a module.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a playbook

Write

Delete a playbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a role from the given community

Write

Delete a role from the given community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a rule

Write

Delete a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a rule (multi-tenant)

Write

Delete a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a rule's alert filter

Write

Delete a rule's alert filter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a rule's alert filter (multi-tenant)

Write

Delete a rule's alert filter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete a single log entry

Write

Delete a single log entry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete all compilation reports

Write

Delete all compilation reports.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete an alert

Write

Delete an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete an intake

Write

Delete an intake.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete an optimization rule

Write

Delete an optimization rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete countermeasures

Write

Delete countermeasures.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete entity

Write

Delete entity.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete format definition

Write

Delete format definition.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete Query

Write

Delete Query.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete Query Parameter

Write

Delete Query Parameter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete Query Run

Write

Delete Query Run.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete Sol Dataset

Write

Delete Sol Dataset.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete the documentation of the intake format

Write

Delete the documentation of the intake format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Delete the smart descriptions of the intake format

Write

Delete the smart descriptions of the intake format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Deny a countermeasure

Write

Deny a countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Deny an action step of a countermeasure

Write

Deny an action step of a countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Detach a detection property

Write

Detach a detection property.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Disable a rule

Write

Disable a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Disable a rule (multi-tenant)

Write

Disable a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Disable an optimization rule

Write

Disable an optimization rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Disable filtered rules

Write

Disable filtered rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Disable filtered rules (multi-tenant)

Write

Disable filtered rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Duplicate an existing case template

Write

Duplicate an existing case template.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Edit an asset

Write

Edit an asset.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Edit an avatar of the community

Write

Edit an avatar of the community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Edit an existing custom field based on its UUID

Write

Edit an existing custom field based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Edit an existing custom priority based on its UUID

Write

Edit an existing custom priority based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Edit an existing custom status based on its UUID

Write

Edit an existing custom status based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Edit an existing custom verdict based on its UUID

Write

Edit an existing custom verdict based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Edit an intake's name, entity uuid or format uuid

Write

edit an intake's name, entity uuid or format uuid.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Enable a rule

Write

Enable a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Enable a rule (multi-tenant)

Write

Enable a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Enable an optimization rule

Write

Enable an optimization rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Enable filtered rules

Write

Enable filtered rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Enable filtered rules (multi-tenant)

Write

Enable filtered rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Execute Query

Write

Execute Query.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Export all the events matching a search job

Write

Export all the events matching a search job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Generate telemetry report

Write

Generate telemetry report.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Get

Read

Get.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a case by its UUID

Read

Get a case by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a case template by UUID

Read

Get a case template by UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a case's comment by its UUID

Read

Get a case's comment by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a comment on an alert

Read

Get a comment on an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a community

Read

Get a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a connector

Read

Get a connector.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a CTI object's telemetry

Read

Get a CTI object's telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a custom status based on its UUID

Read

Get a custom status based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a Cyber Kill Chain Stage

Read

Get a Cyber Kill Chain Stage.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a dashboard by its UUID

Read

Get a dashboard by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a detection rule's telemetry

Read

Get a detection rule's telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a node run's details

Read

Get a node run's details.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a playbook

Read

Get a playbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a playbook run

Read

Get a playbook run.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a playbook run's details

Read

Get a playbook run's details.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a rule

Read

Get a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a rule (multi-tenant mode)

Read

Get a rule (multi-tenant mode).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a rule runbook

Read

Get a rule runbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a single alert by its UUID

Read

Get a single alert by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a single custom field based on its UUID

Read

Get a single custom field based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a single custom priority based on its UUID

Read

Get a single custom priority based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a single custom verdict based on its UUID

Read

Get a single custom verdict based on its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a single log entry

Read

Get a single log entry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a single observable relationship

Read

Get a single observable relationship.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a trigger

Read

Get a trigger.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get a user given its UUID

Read

Get a user given its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get AI usage counters

Read

Get AI usage counters.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get AI usage histogram

Read

Get AI usage histogram.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get alert count by Adversaries

Read

Get alert count by Adversaries.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get alert count by TTP

Read

Get alert count by TTP.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get alert filters counter

Read

Get alert filters counter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Alert Results

Read

Get Alert Results.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Alert Statistics

Read

Get Alert Statistics.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get all available fields that have an observable mapping

Read

Get all available fields that have an observable mapping.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get all communities that belong to the user

Read

Get all communities that belong to the user.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get all permissions that belong to the user

Read

Get all permissions that belong to the user.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an action

Read

Get an action.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an action step in the countermeasure

Read

Get an action step in the countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset

Read

Get an asset.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's applications

Read

Get an asset's applications.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's heatmap

Read

Get an asset's heatmap.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's intake formats telemetry

Read

Get an asset's intake formats telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's intake heatmap

Read

Get an asset's intake heatmap.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's points of interest

Read

Get an asset's points of interest.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's risk score

Read

Get an asset's risk score.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's risk score history

Read

Get an asset's risk score history.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's telemetry

Read

Get an asset's telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's timeline

Read

Get an asset's timeline.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an asset's vulnerabilities

Read

Get an asset's vulnerabilities.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an avatar by its UUID

Read

Get an avatar by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an avatar of the community by its UUID

Read

Get an avatar of the community by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an event search job

Read

Get an event search job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an existing telemetry report

Read

Get an existing telemetry report.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an history entry of an alert

Read

Get an history entry of an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an intake

Read

Get an intake.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an IOC collection

Read

Get an IOC collection.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an object's context

Read

Get an object's context.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an object's existing relationship types

Read

Get an object's existing relationship types.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an object's notes and opinions

Read

Get an object's notes and opinions.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an object's relationships

Read

Get an object's relationships.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an observable

Read

Get an observable.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an observable's relationships

Read

Get an observable's relationships.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an observable's telemetry

Read

Get an observable's telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an observable's telemetry (by ID)

Read

Get an observable's telemetry (by ID).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an Optimization rule

Read

Get an Optimization rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get an overview of CTI compilation reports for a given time range

Read

Get an overview of CTI compilation reports for a given time range.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get assets telemetry

Read

Get assets telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get attack navigator matrix with the MITRE technique ids

Read

Get attack navigator matrix with the MITRE technique ids.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get attack navigator matrix with the MITRE technique ids (multi-tenant)

Read

Get attack navigator matrix with the MITRE technique ids.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get cases' statistics

Read

Get cases' statistics.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get communities of the platform

Read

Get communities of the platform.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get distinct architectures for an asset's applications

Read

Get distinct architectures for an asset's applications.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get distinct names for an asset's applications

Read

Get distinct names for an asset's applications.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get distinct publishers for an asset's applications

Read

Get distinct publishers for an asset's applications.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get documentation of a format

Read

Get documentation of a format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get events telemetry

Read

Get events telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get events telemetry (timeseries)

Read

Get events telemetry (timeseries).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get events telemetry by parsing outcome

Read

Get events telemetry by parsing outcome.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get events telemetry by parsing status (timeseries)

Read

Get events telemetry by parsing status (timeseries).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get format definition

Read

Get format definition.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get HTML content for a gated feature introduction

Read

Get HTML content for a gated feature introduction.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get indicators context

Read

Get indicators context.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get intakes statistics (lag and size)

Read

Get intakes statistics (lag and size).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get intakes statistics as timeseries

Read

Get intakes statistics as timeseries.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get invalid and in warning events telemetry

Read

Get invalid and in warning events telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get logs for a format

Read

Get logs for a format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get most sighted CTI objects

Read

Get most sighted CTI objects.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get objects count by type

Read

Get objects count by type.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get one gated feature for a community

Read

Get one gated feature for a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get paginated node runs for a specific node in a playbook run

Read

Get paginated node runs for a specific node in a playbook run.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get playbook action counter

Read

Get playbook action counter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get playbook action runs histogram

Read

Get playbook action runs histogram.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Query

Read

Get Query.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Query Parameter

Read

Get Query Parameter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Query Run

Read

Get Query Run.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Query Run Top Values

Read

Get Query Run Top Values.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get relationship

Read

Get relationship.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get revisions of an intake format

Read

Get revisions of an intake format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get roles information of a community, it requires read_role permission

Read

Get roles information of a community, it requires read_role permission.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Roy tokens usage counter

Read

Get Roy tokens usage counter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get Rule Schedule

Read

Get Rule Schedule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get rules settings

Read

Get rules settings.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get rules settings (multi-tenant)

Read

Get rules settings.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get rules statistics

Read

Get rules statistics.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get set of countermeasures for a specific alert_type within an entity

Read

Get set of countermeasures for a specific alert_type within an entity.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get set of countermeasures for a specific rule

Read

Get set of countermeasures for a specific rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get set of global countermeasures for a specific alert_type

Read

Get set of global countermeasures for a specific alert_type.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get single entity

Read

Get single entity.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get smart descriptions of a format

Read

Get smart descriptions of a format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get team details

Read

Get team details.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get team members

Read

Get team members.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the available fields leveraged by the formats

Read

Get the available fields leveraged by the formats.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the available smart-descriptions leveraged by the formats

Read

Get the available smart-descriptions leveraged by the formats.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the avatars of the user

Read

Get the avatars of the user.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the average time to close of the alerts

Read

Get the average time to close of the alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the events found by an event search job in descending order

Read

Get the events found by an event search job in descending order.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the fields of the events found by an event search job

Read

Get the fields of the events found by an event search job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the histograms of the events found by an event search job

Read

Get the histograms of the events found by an event search job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the history of a case

Read

Get the history of a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the history of an alert

Read

Get the history of an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the list of intake format UUIDs for the given assets

Read

Get the list of intake format UUIDs for the given assets.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the Markdown content of one term document

Read

Get the Markdown content of one term document.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the objects contained in the given report

Read

Get the objects contained in the given report.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the observables contained in the given report

Read

Get the observables contained in the given report.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the reports the given observable belongs to

Read

Get the reports the given observable belongs to.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the SOC key performance indicators on your alerts including:

Read

Get the SOC key performance indicators on your alerts including:.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get the timeline of an alert by its UUID

Read

Get the timeline of an alert by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get top objects

Read

Get top objects.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get top objects (weekly)

Read

Get top objects (weekly).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Get usage of queries by dashboards

Read

Get usage of queries by dashboards.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Health

Read

Health.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Actions supported for Optimization rules

Read

List Actions supported for Optimization rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alert entities

Read

List alert entities.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alert rules

Read

List alert rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alert sources (last 90 days)

Read

List alert sources (last 90 days).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alert statuses

Read

List alert statuses.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alert targets (last 90 days)

Read

List alert targets (last 90 days).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alert titles

Read

List alert titles.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alerts

Read

List alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List alerts associated to the targeted case

Read

List alerts associated to the targeted case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all avatars of a community

Read

List all avatars of a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all comments of a case

Read

List all comments of a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all custom fields

Read

List all custom fields.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all custom priorities

Read

List all custom priorities.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all custom statuses

Read

List all custom statuses.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all custom verdicts

Read

List all custom verdicts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all labels

Read

List all labels.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all permissions granted to a community

Read

List all permissions granted to a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List all tags

Read

List all tags.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List an avatar's roles

Read

List an avatar's roles.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List asset tags

Read

List asset tags.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List assets uuids associated with a given case's alerts

Read

List assets uuids associated with a given case's alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List available actions

Read

List available actions.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List available playbooks

Read

List available playbooks.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List case custom views visible to the caller

Read

List case custom views visible to the caller.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List case templates

Read

List case templates.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List cases

Read

List cases.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List comments

Read

List comments.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List community settings

Read

List community settings.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List compilation reports

Read

List compilation reports.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List connectors

Read

List connectors.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Cyber Kill Chain Stages

Read

List Cyber Kill Chain Stages.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List dashboards

Read

List dashboards.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List entities associated with a given case's alerts

Read

List entities associated with a given case's alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Executions

Read

List Executions.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List gated features for a community

Read

List gated features for a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List indicators in the given IOC collection

Read

List indicators in the given IOC collection.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List intake formats

Read

List intake formats.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List kill chain short id associated with a case's alerts

Read

List kill chain short id associated with a case's alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List kill chains

Read

List kill chains.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List last known exploited vulnerabilities

Read

List last known exploited vulnerabilities.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List module categories

Read

List module categories.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List modules

Read

List modules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List objects

Read

List objects.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List objects (light)

Read

List objects (light).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List observable tags

Read

List observable tags.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List observables

Read

List observables.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List observables relationships

Read

List observables relationships.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List observed alert types (last 90 days)

Read

List observed alert types (last 90 days).

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Optimization rules

Read

List Optimization rules.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List playbook runs

Read

List playbook runs.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Queries

Read

List Queries.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Query Parameters

Read

List Query Parameters.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List rules associated with alerts within a case

Read

List rules associated with alerts within a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List sectors

Read

List sectors.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Shared Query Parameters

Read

List Shared Query Parameters.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List Sol Datasets

Read

List Sol Datasets.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List sources

Read

List sources.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List STIX relationships

Read

List STIX relationships.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List STIX reports

Read

List STIX reports.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List supported datasources

Read

List supported datasources.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the actions available to update alert statuses

Read

List the actions available to update alert statuses.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the actions available to update an alert status

Read

List the actions available to update an alert status.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the avatars

Read

List the avatars.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the comments of a countermeasure

Read

List the comments of a countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the comments of an action step

Read

List the comments of an action step.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the comments of an alert

Read

List the comments of an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the countermeasures of the alert

Read

List the countermeasures of the alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the countermeasures of the case

Read

List the countermeasures of the case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the existing feeds

Read

List the existing feeds.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the existing IOC collections

Read

List the existing IOC collections.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the history of comments of an alert

Read

List the history of comments of an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the objects of the alert

Read

List the objects of the alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the observables related to the given object

Read

List the observables related to the given object.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List the roles of a community

Read

List the roles of a community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List threats associated with alerts within a case

Read

List threats associated with alerts within a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

List triggers

Read

List triggers.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Lists sub-communities for the specified community

Read

Lists sub-communities for the specified community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Merge assets

Write

Merge assets.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Parse a message against a provided format definition

Read

Parse a message against a provided format definition.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Parse a message against the format

Read

Parse a message against the format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Patch a user's info given its UUID

Write

Patch a user's info given its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Patch an alert

Write

Patch an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Patch Query Run

Write

Patch Query Run.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Playbook runs statistics

Read

Playbook runs statistics.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Account permissions

A Sekoia API key with the needed permissions

Re-run a playbook

Write

Re-run a playbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Re-run failed playbook runs

Write

Re-run failed playbook runs.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove a dashboard

Write

Remove a dashboard.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove a feed

Write

Remove a feed.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove a role from an avatar

Write

Remove a role from an avatar.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove an action step from the countermeasure

Write

Remove an action step from the countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove an asset tag

Write

Remove an asset tag.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove an asset's contextual property

Write

Remove an asset's contextual property.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove an asset's typed contextual property

Write

Remove an asset's typed contextual property.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove an avatar from the community

Write

Remove an avatar from the community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove an event from a case

Write

Remove an event from a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove events from a case

Write

Remove events from a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Remove the given IOC collection

Write

Remove the given IOC collection.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Replace the associated alerts to a case

Write

Replace the associated alerts to a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Request an IOC revocation

Write

Request an IOC revocation.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Restore an asset

Write

Restore an asset.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Retrieve "indicates" relationships

Read

Retrieve "indicates" relationships.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve a feed

Read

Retrieve a feed.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve a label

Read

Retrieve a label.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve a report

Read

Retrieve a report.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve a specific kill chain

Read

Retrieve a specific kill chain.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve an export job

Read

Retrieve an export job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve an IOC's context

Read

Retrieve an IOC's context.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve indicators related to an observable

Read

Retrieve indicators related to an observable.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve playbook statistics

Read

Retrieve playbook statistics.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve statistics about the relationships of the given object

Read

Retrieve statistics about the relationships of the given object.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve the reports containing the given object

Read

Retrieve the reports containing the given object.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Retrieve the sources of an object

Read

Retrieve the sources of an object.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Return the top alerts for the given type

Read

Return the top alerts for the given type.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Review assets in bulk

Write

Review assets in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Revoke an asset

Write

Revoke an asset.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Revoke an indicator by default

Write

Revoke an indicator by default.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Revoke assets in bulk

Write

Revoke assets in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Run a standalone action

Write

Run a standalone action.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Save Query

Write

Save Query.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Search an asset's vulnerabilities

Read

Search an asset's vulnerabilities.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Search assets

Read

Search assets.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Search atoms

Read

Search atoms.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Search CTI objects telemetry

Read

Search CTI objects telemetry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Search indicators

Read

Search indicators.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Search observables

Read

Search observables.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Set an asset's contextual property

Write

Set an asset's contextual property.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Set an asset's typed contextual property

Write

Set an asset's typed contextual property.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Sets the documentation of the intake format

Write

Sets the documentation of the intake format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Sets the smart descriptions of the intake format

Write

Sets the smart descriptions of the intake format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Store logs for a format

Write

Store logs for a format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Test a Sigma pattern against alerts

Read

Test a Sigma pattern against alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Topk

Read

Topk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

Trigger a status update asynchronously on a list of alerts

Write

Trigger a status update asynchronously on a list of alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a case

Write

Update a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a case custom view

Write

Update a case custom view.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a case's comment by its UUID

Write

Update a case's comment by its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a comment on an alert

Write

Update a comment on an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a countermeasure

Write

Update a countermeasure.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a dashboard

Write

Update a dashboard.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a generation mode

Write

Update a generation mode.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a intake

Write

update a intake.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a playbook

Write

Update a playbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a role in the given community

Write

Update a role in the given community.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a rule

Write

Update a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a rule (multi-tenant)

Write

Update a rule.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a rule runbook

Write

Update a rule runbook.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a rule's alert filter

Write

Update a rule's alert filter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a rule's alert filter (multi-tenant)

Write

Update a rule's alert filter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a single log entry

Write

Update a single log entry.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update a user given its UUID

Write

Update a user given its UUID.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update an alert custom status or a legacy status

Write

Update an alert custom status or a legacy status.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update an asset's status vulnerability

Write

Update an asset's status vulnerability.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update an event search job

Write

Update an event search job.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update an existing case template

Write

Update an existing case template.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update an IOC collection

Write

Update an IOC collection.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update case assignees in bulk

Write

Update case assignees in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update case custom fields in bulk

Write

Update case custom fields in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update case priority in bulk

Write

Update case priority in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update case status in bulk

Write

Update case status in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update case verdict in bulk

Write

Update case verdict in bulk.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update countermeasures

Write

Update countermeasures.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update custom fields of a case

Write

Update custom fields of a case.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update custom fields of an alert

Write

Update custom fields of an alert.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update entity

Write

Update entity.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update format definition

Write

Update format definition.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update Query

Write

Update Query.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update Query Parameter

Write

Update Query Parameter.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update Result

Write

Update Result.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update roles of the avatar

Write

Update roles of the avatar.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update rules settings

Write

Update rules settings.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update rules settings (multi-tenant)

Write

Update rules settings.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update team members

Write

Update team members.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update the assignee of a list of alerts asynchronously

Write

Update the assignee of a list of alerts asynchronously.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update the community information (communities) patch

Write

Update the community information.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update the community information (communities) put

Write

Update the community information.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update the legacy status on a list of alerts

Write

Update the legacy status on a list of alerts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update the levels of the custom priorities

Write

Update the levels of the custom priorities.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update the levels of the custom statuses

Write

Update the levels of the custom statuses.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Update the levels of the custom verdicts

Write

Update the levels of the custom verdicts.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

A repeated request may repeat the external action. Review the previous result before retrying a write.

Validate message or event against a parser provided or an existing format

Read

Validate message or event against a parser provided or an existing format.

Permissions and limits

Account permissions

A Sekoia API key with the needed permissions

SETUP

Start with a controlled test.

01Connect the intended account

Use the account and permissions required for your process. Review the connection check before configuring a workflow action.

02Review inputs and access

Select a listed operation and map its required inputs. Use test records and add a human approval before writes that need review.

03Confirm the result

Inspect step outputs and confirm the result in Sekoia.io. A saved workflow is not a completed provider action.

Follow the workflow quickstart

EXPLORE YOUR STACK