Incidents

addToBlocklist: adds a new hash to the Blocklist.

getBlocklistItems: lists existing Blocklist items.

removeFromBlocklist: removes a specific entry from the Blocklist.

createIsolateEndpointTask: creates a task to isolate an endpoint.

createRestoreEndpointFromIsolationTask: creates a task to restore an isolated endpoint.

createCustomRule: creates a custom rule.

getCustomRulesList: lists existing custom rule items.

updateCustomRule: edits any existing custom exclusion or detection rule.

deleteCustomRule: removes a specific custom rule.

changeIncidentStatus: changes the status of a specific incident.

updateIncidentNote: assigns a note to a specific incident.

createResponseAction: creates a response action for a specific user node within an incident.

getSimilarEmails: retrieves emails similar to a given email.

getResponseActionStatus: returns the status and the result of a response action.

createRestoreEndpointFromIsolationTask

createIsolateEndpointTask

updateIncidentNote

addToBlocklist

getBlocklistItems

removeFromBlocklist